The Roku, Inc. data breach exposed usernames, passwords, and account login details, potentially affecting individual Roku accounts. No highly sensitive personal information was accessed. Roku has taken immediate action to secure affected accounts and refund unauthorized charges.
Note that the bit about arbitration or not filing class action suits is not new. The new bit was having to talk to their lawyers even before requesting arbitration.
But in any case, I doubt those would be held enforceable in the event of something like this.
Yeah, I wonder how much weight that new arbitration agreement holds in light of this breach. I feel like you can't just fuck up with your customers' data, force them to agree to not sue you, and then tell them that you fucked up with their data. Those users agreed to a contract where they likely had critical information withheld from them in bad faith.