Sure seems risky to admit like this. The CFAA has been used very broadly, for example in the prosecution of Weev for accessing customer information on an unsecured AT&T server. It appears this conviction was overturned based on venue (a technicality unrelated to the CFAA), and the underlying question of the CFAA's breadth is still unknown. [1] At the very least, the author is opening himself up to prosecution — even if he ultimately could prevail.
Journalists do enjoy certain freedoms, but to my knowledge (as a former lawyer), special treatment under the CFAA isn't one of them.
1: https://www.wired.com/2014/04/att-hacker-conviction-vacated/