The authors do this kind of stunt hacking all the time, they look at shit that has no security contact, no bugbounty, and they hack them without permission for clout