He could have ask a friend to apply the exploit, is a matter of responsibility because you need proofs to support your statements. What would happen if the exploit is not real and he called it out incorrectly?
He called out nothing incorrectly, he said there's this stuff circulating that I think seems credible because of blah, but we don't know.
He told you the facts and his opinion on them.