They're constantly updating best practices, the kits come with a little razor now. Though we got told to apply the pad on the hair and then pull it off, effectively waxing the area. It's apparently to get better contact. Personally I think shaving would be more effective, suppose you do what you have to in the situation.
They didn't use strong encryption by default, Something about not enough iterations of whatever algorithm they use.
They also got hacked (more than once) , which is roughly when they announced the encryption issue.
I feel like they got bought by a shitty company too, but that's beyond me.
There have been reports that some of these vaults that were stolen have already been compromised, though not sure if there is any proof.