Ah. Wait. They took one of these actions within an hour of it going up. :P I suppose it'll be no time at all until they take down the account of the person hacking Parler and live tweeting the content being discussed in this article... which they've been doing for that past ... 48 hours.
You don't consider exploiting 2fa fail-open being triggered by deplatforming by their 2fa provider being used to mass password reset accounts and vacuum up their private messages not a security circumvention?
What about using a arbitrary content type upload on their video subdomain to implement an XSS attack to allow them to download all videos, including ones sent privately between users?
There might have been other attacks in the way you describe, but it doesn't seem to be used by the team behind archiving the content.
Right???