We don't want to scare people off, that isn't how we want to run our business. We know it wasn't OSBot, we want to explain to them the reason they got hacked, and close the topic. No need for further discussion.
We don't know your email and password, that is locally stored, nothing to do with it on our side. You got phished, because you clicked an email that wasn't actually jagex and you fell for it. Or you clicked a youtube video link.