I dislike the choice of the word "doxes" in the headline. This is a story of a cybersecurity company exposing malicious activity by a government, just like when other cybersecurity companies expose malicious activity by other governments. All of those companies are doing something appropriate.
I had the same reaction. "Doxing" implies malicious intent directed towards some individuals. "Exposes" would be a better verb but it lacks sensationalism. The headline is already a bit politically charged, though, with China presumed as a malicious actor.
It's just what media always do. No surprise in the words they choose. The words the choose shows they report based on opinions not facts
The company's webpage contains a detail report of the backdoor BVP47.