I think that was the entrypoint. But I think the ProPublica article wants more research into the weakness in Microsoft's default (at the time) Active Directory settings that allowed lateral movement, as described in

https://www.propublica.org/article/microsoft-solarwinds-gold...