I don't think the "bottom line" of "a model escaped containment and then successfully attacked someone else's production infrastructure" is a description of the specific vulnerability and exploit.

That's like saying the key takeaway of 9/11 was that skyscrapers can be severely damaged by airplane collisions.