yup. if the report is meant to be other than marketing, they would have done well to have an outside review before publishing. i don't see any acknowledgements section so i assume that didn't happen.

this is basically soft marketing of the skills they bring to the table. realistic/practical threat modeling not being one of them.