I think you might be ascribing too much to the marketing types. Regardless of the company, a "controlled leak" would probably be someone from PR (credible) talking to a single (or few) outlets. They almost certainly have no idea of (a) what a user-agent string is, (b) that it is logged to servers, and (c) that high-credibility news outlets are monitoring user-agent strings.
I'm putting my money on gaffe.