Cybersecurity Ventures is not a clickbaity newspaper. They are specialists. Obviously when they publish articles in their domain, it has an advertising purpose but producing shoddy figures would only hurt their brand.

You can't trust everything coming from companies at face value. That doesn't mean you shouldn't trust anything.