The whole article has a subtle undercurrent of sarcasm and mirth; they clearly don't expect Cellebrite to disclose the vulnerabilities they use. They're just poking fun at them.