Again, internal and external are two different things.

They can solve whatever problems they like, and they can use those findings internally however they like. I think the advice is on how to disclose the findings to the public without as much uproar as our previous debacle.