The only thing that is being disputed is the meaning of the term "direct access". To a technical person, and to a technology company like Google, that would mean shell access and ability to run arbitrary commands on Google's server. That is the only thing that these companies have denied in their statements. It was a somewhat misleading description in the original slides and original reporting, but it does not really change the scope of what we are talking about.