They really are delusional, as a security person crowdstrike was overvalued before this event, and to everyone in tech this shows how bad their engineering practices are.
but they are able to insert themselves into this many enterprise machines! So regardless of your security credentials, they made good business decisions.
On the other hand, this may open the veil for a lot of companies to dump them.