Personally, I think it's

Microsoft should be on the top of their game dealing with these issues. If someone can hack an Xbox LIVE profile, it shows you that Microsoft's database isn't secure enough.