Calling it remotely exploitable indeed seems misleading. A lot of the article is just fluf without real content.