I doubt simonw would self-describe as a security researcher - his post was based on the original work here https://www.generalanalysis.com/blog/supabase-mcp-blog which is not 'the followup analysis'. This is really poor blogspam.

Edit: The first bit was silently fixed, the second wasn't - the fact you won't even acknowledge the mistake or the edit just makes it look more mercenary and blogspammy.