Is there any basis in fact to what's alleged in the article? Forking over your university login credentials to scihub seems like a very bad idea indeed. OTOH, presumably they must have amassed almost the entire corpus (https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5832410/) by some such means...