I think one reason is that easily-breached enterprises have used such language in many forms over the years to try to excuse themselves from being weak on secur

I think one reason is that easily-breached enterprises have used such language in many forms over the years to try to excuse themselves from being weak on security. So when one credibly gets hacked by an actual state actor, the words conjure up the false claims.