That's a bad summary. This hack basically only affected users who had already logged in via the Instagram web app, and required them to visit a special page set up by the hacker that would then make their profile public.
It was a vulnerability to be sure, but I don't believe the Instagram web app is heavily used, as it's pretty shitty compared to the phone app.