Imo, the article misses the mark on a few fine points. The research paper they linked is very good though.

Not surprised at all. AirDrop was never meant to be private.