They mentioned the likely cause in the next sentence:

> The most likely vector was that her phone was out of date and not receiving security patches anymore.

I believe these individuals are suggesting that locked-down ecosystems can be beneficial in certain situations. They help prevent regular users from compromising their device security... assuming they keep them updated...