They mention unsecured Wi-Fi? Either way, openly attacking citizens accounts seems... surprising for a government agency confronted to peaceful protesters?

I don't doubt the US (or German, or UK, etc) have the technical capacity to do such things, but would they risk it be discovered for such a "low" target as a natural site?

If true that probably means they have much more powerful tools at their disposal for "true emergencies"...?