The headline is accurate, and not click bait IMO.

No where did they imply Toyota was hit, however to believe it is any less serious because a Supplier was hit vs them directly shows ignorance of how manufacturing works

Supply Chain attacks are very serious and are how a lot of malware is moving because the primary targets are getting very good at preventing direct attacks however supplier are often overlooked as an attack vector, and even if they are aware of the risk, that risk is often very much understated