I didn't address anything except for the quoted line from the blog post, which is the binary PoC detection part.

From the blog post- >The PoC that has been sent to CrowdStrike was flagged as malicious. The msiexec call of the deinstaller was also flagged as malicious.

Everything else I have no opinion I wish to share. There are many posters in this thread that would satisfy your desire to engage on the other issues.