The article is talking about academic research while most of the examples you quote seem recent(ish) industry implementations of these security models. I'd say

The article is talking about academic research while most of the examples you quote seem recent(ish) industry implementations of these security models. I'd say that corroborates rather then disputes the authors thesis..