I didn't say they were clueless. I said their pr is clueless. Some pr person said "there is no risk" relating to it security of a large organization. That is obviously false, and clueless.
Were never at risk as a result of this pentest. Obviously, there is still a risk of data loss... but that risk is present among nearly every company on Earth.
Clueless would be refusing to have teams test your security.