Re: Clickbait.
I would agree with the conflict of interest if I could find that the company offers services like VPN or SSL configuration, but apparently they don't.
So if I wanted to be critical with your comment, I would say that you did not have a look on the company's website that would show they make security tests and they don't seem to provide other services (like configuration improvements).
As a result, as their main activity seems to be security testing, they probably don't mind if results are good or bad, they just want to show they can do their job by releasing this research.
Biting the hand that feeds IT
