A number of reasons that I can think of..... first of all being that if you're a micro stakes player & are playing from a secure connection from your house, I don't think you have anything to be concerned about. Another reason being, players on Ultimatebet are generally weaker than on some of the other sites.
Sure, I'll definitely concede that micro stakes players probably have very little to worry about with respect to hole cards showing up via the XOR encryption bug. What's next though? It's come out that the PokerTableRatings crew had this information for about five weeks before releasing it (not with the intent to use it maliciously, but to properly document it for release). What else is out there? The problem with the XOR fault wasn't that people could see your hole cards, but rather that they could get your username/password combination, and siphon your entire account. Micro stakes or not, I'd be floored if someone stole my entire roll off the site, just because the site in question didn't take the time to implement an
industry standard encryption scheme. AND they claim to have had numerous security audits, proving without a doubt that they're secure. I sure don't trust them to hold any cash of mine. Your mileage may vary.
With respect to the bad name that this may give the poker industry, the more people who are aware of these problems and still choose to play on the site acts as an implicit advertisement for the people who don't follow
poker news, and have no idea this is going on. UB isn't putting this information on their main page, and they're not putting it in a popup when you log in. The majority of users won't know, and they'll blissfully keep playing without a care. If you veto the site, it's more likely that these games will dry up, and the softer players will migrate somewhere like Stars where you can pick them up again.
Again, it's not just about someone stealing my micro 2c blind every few
hands because they can see my cards. I moved my roll off UB thanks to what I perceived as a repeated demonstration of apathy and incompetence. Of course, everyone can make their own opinion, and if someone really wants to play there even while knowing all the nasty stuff that's gone on, it's a shame, but it's their call.