Good to hear Microsoft being more forthcoming in regards to their security woes than I remember Sony being in agreeing to this interview. Interesting set of questions here too! Good stuff all around.
I'd hardly call it "forthcoming". Microsoft needs to do damage control to prevent something like this from getting out of hand. They aren't actively trying to repair the problems at the core with this current flood of reported stolen accounts, and Stepto is only in the limelight to ease public opinion, say some nice things and talk about how they want to protect their users information.
Believing anything beyond that is really just being a little bit too gullible. Just a quick Google search yields dozens upon dozens of reports and subsequent comments from people who have had their accounts stolen, locked for ridiculous periods of time, or a combination of other awful scenarios. People on the Xbox/Microsoft security team are only pushed into the public to do damage control, and only fix the most public and damaging cases to uphold the public view that they, "are on top of the case and have solved the issues." It's the classic Superman scenario.
EDIT: I also don't want to make it sound like Stepto has ulterior motives, or isn't sincere in his job. I believe he is, but Microsoft as a company is questionable when it comes to these things, especially repairing internal processes and procedures to hopefully help the arisen issues.