That's a bold statement considering how easy it was for testers to quickly find examples of this in initial testing.
> against public code on GitHub
... and how some of those examples found were from code not hosted on Github.
Ultimately though, what matters here is not whether this is true but whether it's plausible enough for legal departments in companies buy it.