The headline overstates the story as written in the body - GCHQ called the publisher when they happened across a purported leaked draft online. That doesn't see

The headline overstates the story as written in the body - GCHQ called the publisher when they happened across a purported leaked draft online. That doesn't seem out of order; they weren't looking at secured information, and weren't tasked to protect the IP.