If he gave a standard appeasing PR statement without following it up at all, that would somehow be preferable? This may be snarky, but at least you know what to expect.

There doesn’t seem to be any data that they based this conclusion on, but I certainly find it somewhat plausible. High turnover and a disconnect between employer and employee may drive the lack of reporting and enforcement you point out. It may also reduce the perceived risk, like your colleagues finding out you are a creep, or being fired.