I believe this has the same issue as the last article that had these claims.
We can assume that Mythos was given a much less pointed prompt/was able to come up with these vulnerabilities without specificity, while smaller models like Opus/GPT 5.4 had to be given a specific area or hints about where the vulnerability lives.
Please correct me if I'm wrong/misunderstanding.