I have to agree. There is no evidence of what particular attack vectors lead to this exploit. His conclusion are unsubstantiated blanket suggestions.