Yes, that’s the PoC.

Seemingly it could have been scoped tighter.

But complaining about the methodology your (successful, free, overdue) penetration test is wild.

Well done, defender of hill, protector of the mound.