That whole article felt like "Claude is so good Chinese hackers are using it for espionage" marketing fluff tbh
I also would believe that they fell into the trap of being so good at making Claude they now think they are good at everything and so why hire an infosec person we can write our own report! And that’s why their report violates so many norms because they didn’t know them.