It makes sense that any security claim about something "impossible" from 4 years ago might now be possible. They may have been right in 2014.