You don't get to say you robbed a bank because you were able to walk into the lobby after hours.
This was absolutely a breach of a device on their corporate network and should be treated as such. Just because the network wasn't interesting, doesn't mean the breach didn't happen.
I have sympathy for their IR team because this would just be a random Tuesday had it not made it to the press.
It’s okay to name the products and why they are used but the posts lacks some subtlety.
Reminds me of podcasts where the guest gets into talking about their product / company way too early instead of focusing discussion on the problem space in general.