And nobody ever said that its the only thing they do.
When they bring a product to market, that is.
Neuralink has actually no responsibility to tell you their whole security architecture. They are presenting this for recruiting and showing the public some of their progress.