The article is too short to draw any conclusion but in that framing from an affected party it sounds shitty. I feel like we only see the ending to a long story, like a mole hunt in their ranks or whatever. The quoted guy supposes they did so because company’s workers may have an access to documents of their clients and I’d call that bullshit for, like, how it even works and why would anyone allow it?