The first question was, what is Medium?
I had to explain that it was just this open-to-anybody blogging platform, and not a personal site of mine. Outside of the tech sphere, it's not so recognizable.
After evaluating this situation further, I felt further comfort in knowing there's an added level of authenticity to the post. They could have signed it with a GPG key which would've been nice, but not only would their core site have needed to have been comprised but also their medium account in order to deliver this news. Should this have been a security incident I would have been comforted by these additional ID confirmations.