Why does it matter that what she did was a "simple" hack that didn't require exploiting fifteen CVEs at once?
It's akin to pulling away the seat of a teacher who wants to sit down.
Everybody is technically capable of pulling the seat away, it does not require any special skills.
You still get in trouble if you do it.