But Google has probably hired ten PhDs just to make sure none of their products gets exploited like this.

But the PhDs failed. Thus, it's newsworthy.