The article itself it just as bad.
...to breach security by focusing on the vulnerability in the browser
This sounds like the was a specific browser bug or is the address bar now a vulnerability?
“It would have been hard to prepare for this type of vulnerability,” Hard to prepare against people changing &acctno=1234567 to &acctno=1234568 ?