Could it be that authors of this post are trying to portray NSO as more powerful than they actually are? Could there be elements in googleprojectzero that work for NSO?

It is a well known method to make a spy operation more elaborate to worry adversaries.