The IMF is not a company, it is an international collaborative institution. It makes total sense for such a body to openly describe a need for security improvements so that the people in charge can get motivated to implement them.

I am glad that systems are actively and preemptively tested so that issues can prevented. It is the duty for some body in society to do so and I would be incredibly angry if no one felt responsibility to do so.