True that the headline is grabby, but if you are trying to pwn someone's phone, the speed of execution is important, right? "Hi, can I use your phone to call my mum? My phone's battery has died. I'll be back in 45 minutes..."
Seems most people didn't really read his story from beginning to end. Specifically the part at the beginning of the post: "The product itself is not delivered as a separate executable, but as a complete product. We don't permit our customers to crack it open..."
If he distributes his product as a monolithic and atomic item, wouldn't he be forced to release all parts of it if requested?