Obviously it is bad, but the article explicitly claims that following the specifically described process "an attacker can jump from any web page to full command

Obviously it is bad, but the article explicitly claims that following the specifically described process "an attacker can jump from any web page to full command execution" which is simply false. This is dishonest regardless of how "central" it is, or how much we could imagine a different exploit.