They explain in the article that they get downloaded 117 millions of times per month from npm. When someone visits a website they don't download libraries from

They explain in the article that they get downloaded 117 millions of times per month from npm. When someone visits a website they don't download libraries from npm, those download numbers come from developers and build scripts but not from users. So while it can be argued that a percentage of those 117M/month are on automated scripts, even with a very conservative number saying of 1% of them being genuine installs this still leaves them at millions of installs per year. So yes, it's definitely not disingenuous to say it's used by millions.