They "said" stuff about security. That doesn't mean they did it. Also, not 100% of coins are in cold storage, a good amount is in the hot wallets.