Well, it doesn't say that they're not working on their processes - but that's not good press, so one doesn't expect that to be covered.

And, of course, leaking a confidential report that could help terrorists counter airport security is certainly stupid and probably criminal. (Even if it looks like all you have to do to penetrate security is to show up it doesn't change the wrongness of the act.)