That's exactly their point. They claim most measurement tools will give false results if your web server outputs the headers before processing the actual request data.
The problem is not with TTFB -- it's that tests that succeed even with "cheating" header responses need to be fixed, if possible, to fail the cheating server.
WebPageTest could modify their TTFB test to require a complete header, so the single-character cheating wouldn't work.