Given that the original suit included claims that "Defendant never informed Plaintiff that it would monitor, collect, and transmit her Usage Information" that seems to be one potential moral.

> If they would have updated the privacy policy on their product would they have been legally protected?

Presumably only a case being decided at trial could determine that. But it's worth looking at the proposed settlement documents that outline the non-financial changes they agreed to in order to settle the case.