I'm certain that the legal requirements can be met without outright lying (or admitting to unbelievably gross incompetence).
In fact, they seem to agree. I loaded the page just now, and "We have thoroughly investigated this technology and do not find any evidence to substantiate security concerns." is no longer present in their statement.
Their statement is still unbelievably condescending and awful (and none of that has any legal bearing that I can see) but they at least removed the part where they outright denied any security problem.
You probably should blame legal, not PR.