Pretty sure he’s saying they’re ignoring the vulnerabilities entirely, and instead trying to push the blame onto pen-testing tools. Like saying that a disease is spreading because of all the testing, rather than because they stopped treating the drinking water.
By that standard, whats to stop people from just getting more phone numbers? Its just an additional cost.