I have a hard time believing that something written on sophos.com can be so click-baity/devoid of substance. Half of it is vulnerability vs exploit in eli5 sty

I have a hard time believing that something written on sophos.com can be so click-baity/devoid of substance. Half of it is vulnerability vs exploit in eli5 style, and then the rest is just mentioning FileReader in passing.