Earlier quoted context omitted.
They reflect very well. Now that this vulnerability has been identified, they can fix it and solve the problem for their users.
They could fix the problem regardless of whether the app was downloaded from the app store, a third party store, or just sideloaded, so I don't see what you're getting at.
So how can it reflect badly on their case?
The way it reflects well, is to notice that this is a small hole in their privacy measures which can easily be fixed, and the only reason we are talking about it is that for the most part their privacy controls work well. I.e. it demonstrates their seriousness about privacy.