No, their report mentions that despite intentionally removing dual-use cybersecurity training data, K3.1 is better than K3 at cybersecurity tasks (both defensive and offensive), because it's just a lot better at coding in general. It's just not as good at cyber as the unrestricted version of K3.1 that they trained initially and didn't release.