If the title of the article is the conclusion, I really don't see how they arrive there based on the post.

If I read the post and came up with the thesis sentence myself, it would be "WhatsApp is vulnerable to MITM attacks because it tries to automate key changes by default"