Every “upgradable” smart contract has a back door that allows the author to change the code. So it’s a fair assessment to claim that they did have control.
Discussion
Depends on what functions can be upgraded. Also there's a limit to how convoluted an argument they'll get away with. The Coin Center article suggests that the DoJ is being a bit handwavy here.