I think it wasn't just CCleaner. https://forum.avast.com/index.php?topic=325259.0 https://forum.avast.com/index.php?topic=325231.0 This is a article from June when Gen Digital (who own multiple brands, including Norton, Avast, LifeLock, Avira, AVG, ReputationDefender, and CCleaner.) disclosed they had been hit by MOVEit. https://securityaffairs.com/147739/cyber-crime/gen-digital-moveit-ransomware-attack.html
That's what I do as well. Furthermore, I remove the 'x86' and 'x64' folders from it (driver updater), so that I have less bloat. Bonus: it starts much faster.
I find that HiBit Uninstaller has enough cleanup functionality that I have no need to use anything else. CCleaner should have kept its original name.
Seems like this shows a potential danger for mergers. When one is hacked, the others could likely be as well.