Without reading the ToS too carefully, I'm all but certain academic and industry-leading security work is deliberately carved out. Clearly this rule is designed to disallow liability concerns like a viral "how to see someone else's snapchats!" video, etc...
In the case of the linked tweet, it seems to have also hit a legitimate-seeming-if-not-industry-leading security source as a false positive. And that's bad, and a reason to oppose this policy in general.
But treating this as an "Ah hah! Hypocrisy!" kind of thing is missing the point and not going to help anyone. You know what they're trying to do.