That paper is from 2018. I expect they've been remediated by now, though everything is going to be vulnerable at some point in some way. What matters is for how long.