I take offence to their statement "leaves a backdoor unlocked". It's no such thing. The de-auth step merely saves you the time of having to wait for the client/

I take offence to their statement "leaves a backdoor unlocked". It's no such thing. The de-auth step merely saves you the time of having to wait for the client/ap to renegotiate on their own. Even if your de-auth step is successful, you still have to conduct a brute force against the handshake you captured. Nothing, at any time, is unlocked.