I think the point of his critics wasn't that this is no real vulnerability but that the implied severity was blown out of proportion.