I think that finding and fixing this many vulns is a worthwhile achievement, no matter how they did it. But it does detract from the quality of the article that they are pushing CoPilot so heavily.