It sounds more like they're doubling down trying to make this "hacker" seem more malicious than he was to draw attention away from the fact that their security measures are pretty atrocious.