No, it is designed to be suggestive -- to shift attention and perhaps even blame. And of course the BBC picked up on it for clickbait reasons. Brilliant (but perhaps evil) PR by Fastly.

Customer configuration is an irrelevant detail that should have been left out until a full RCA. What does it matter that it was valid? So an invalid configuration would have meant it was indeed the _customer's_ fault??

A more fair treatment would have been, "a customer pentested us and won".