Bad faith requires you to intend it badly, though, not just for it to be bad.
The above statement is claiming it likely is intended as something bad though. A convenient coverup.
> dishonest or unacceptable behaviour:
https://dictionary.cambridge.org/dictionary/english/bad-fait...
> I just think the security argument is a convenient frame for decisions that are actually about something else.
That would mean they think it’s bad faith. Claiming to do something because of A but to really do it because of B is dishonest
Framing a business decision as a security imperative sure sounds like intent to mislead to me.