They sent the blacked out version to the media, and Ars and others published them like that.

So why did they black it out? As a childish joke? Also not inspiring trust in them.

And if they just blacked it out, without need of doing so, and fucked that up, then the question is if they're trustworthy if their security team doesn't double check their blacked out PDFs.

The problem isn't with the content, but with the process.