The US outlawed selling this product after that happend. That cuts your claim of marketing for CoI down.
And comparing a public website with a secured intranet is absured. As is comparing security systems of the 90s (when we used DES) to modern security systems.
Tell me when they cause damage or are prosecuted, until then, it's just an as, likely exaggerated or straight up false.
Again, it sounds like you didn't read the article. They were hired for this security audit. It wasn't rogue. There won't be a prosecution of their contractor lol.
They were just shocked at how effective it was. Most penetration tests don't have that many critical vulnerability findings.