Did you read the article? They did not believe that the token the agent had access to had the ability to delete production data using it.