That's a boneheaded excuse: if the comment was about improving privacy it would be highlighting mitigation strategies, not focussing on exploiting potential vulnerabilities.