This was a strange article. Why would a journalist at a major newspaper be so ignorant of appropriate cyber security and privacy practices and install a PRC app

This was a strange article. Why would a journalist at a major newspaper be so ignorant of appropriate cyber security and privacy practices and install a PRC app on their primary phone? Why would they assume that they _weren't_ being monitored? And why would the company, if they wanted to spy on her, use 'another iphone' rather than just pull the data from the backend? That was the weirdest part.