They got a code review. That doesn't mean the message they inserted was approved, it just means they got two engineers to sign off on the code.

Obviously, inserting pro-unionization messaging into a security tool isn't "by the book", or we wouldn't be having this discussion.