What they don't do is the design, testing, and certification in China. This is the real IP - not the materials or the assembly techniques, but how to navigate the regulatory landscape of the FAA and the EASA in extremely complex hardware/software integrated systems. The article mentions certification documents/evidence as a primary target.
The funny thing in all this is that passengers inherently trust the FAA and EASA operated system and inherently do not trust a Chinese-owned, manufactured, and regulated system for commercial aircraft. When really this breach was all about the money - Chinese companies want to get in on Boeing and Airbus' market.
I don't have a dog in this fight, but I will say that Boeing isn't doing itself any favors with it's cost cutting efforts on the 737 MAX, and that if it wants to keep consumers trust in its planes over the perception of "inferior" foreign competition, it needs to work much more closely with the FAA to ensure safety is the primary motivating factor on new designs and does not get overriden by fuel efficiency.