The article Sophos links with regards to an explanation for choosing PBKDF2 over bcrypt or scrypt goes over numerous obviously bad practices like cleartext storage, then states the following, without further detail:
We’ll recommend PBKDF2 here because it is based on hashing primitives that satisfy many national and international standards.
This seems like a vague and probably misguided line of reasoning. What specifically would make that recommendation rational? bcrypt wasn't new in 2010 when NIST published the article recommending PBKDF2, and they haven't made the switch since. Dual_EC_DRBG was recommended by NIST in 2006 which makes me deeply skeptical of anything they say.
If anyone could provide the motivation for choosing PBKDF2 in reasonably terms I'd appreciate it.