Are you saying we shouldn't expect a military satellite to have some semblance of simple authentication?
It sounds like what they built was literally a simple repeater. If that's the case, they shouldn't have a problem with this "unauthorized use," because by design, there is no such thing.
(The preceding assumes the pirate is licensed to transmit in the 1.25m band that the article noted as the uplink.)