That's not what they're saying. The point is that common block-encryption modes are exploitable, and many of these exploits can be mitigated with message authen

That's not what they're saying. The point is that common block-encryption modes are exploitable, and many of these exploits can be mitigated with message authentication (or by using authenticated block modes, like AES-GCM.)