I picked up on this too. Everyone involved has a perverse incentive to portray the narrative as the work of genius, innovative hackers. That's the issue with an article like this, where all the quoted sources are people directly involved. I would have appreciated some 3rd party analysis of just how sophisticated this attack really was, and how much of the blame should really rest on the lax standards of the victims. Mandiant in particular doesn't have much excuse.