To be honest, even the article is not a formal attempt at proving all of this, nor does it have to, it's a bit of a conjecture, but anyway.
My reasoning goes along this line, which of the following two sentences you think is more likely to be true?
A. All n-day vulnerability discovery problems can be mapped to a document rerank problem.
or
B. Some n-day vulnerability discovery problems can be mapped to a document rerank problem.
I lean towards B, without any proof for it. Hence why I think the correct way is to reduce reranks into n-days (and all the other "hard problems").
If you think A is true, you still have to show that all reranks can be reduced to n-days, to be rigorous and able to say that your proposed algorithm works in both domains.
In the end it could be that both alternatives are equivalent, but it's easier to just say "reranks can be reduced to n-days" and because of this "some n-days can be adequately solved by my algorithm that works in reranks".