It was explained in the post

Did you read the article? They did not believe that the token the agent had access to had the ability to delete production data using it.