Exactly, everyone knows 0 beats 5.
And where exactly do you get this "0" exactly ? They've outsourced their security to a specialized company, like they already have for the identity verification (now outsources to Jumio) few weeks ago. And it's a positive move, both for the creators, that will benefit from a better security, and for Patreon, that reduced his costs.
I generalize, but honestly, if you've done a good job, being a security admin is a boring job. You'll pass 90% of your time reading about computer security while looking at green lights. And as a company you've to pay enough people to have someone in front of the said lights 24/24 7/7.
Outsourcing this part of your network administration will cost you less, and if you choose a big enough company for this, you'll have the guaranty that whatever happen to you, the admin who will take the issue in charge know what he do. The last point is important, because with an internal team, like they previously had, you've no guaranty that at least one of the admin while have the knowledge to counter the current attack.
All this being said as pure speculation, my "their team was 5 persons" was really a joke.
So far we only know that they fired 5 persons from the security team. Five persons who could perfectly have been in charge of the creator identification and payment processing, and are now useless since, like I said, this is now outsourced to Jumio.