Am I misunderstanding this?

Any stateful system that exposes state in a flexible way has risk to data exposure.

Does anyone actually think a stateful system wouldn’t release state?

Why not just write a paper “The sky may usually be blue”?

yes, you’re misunderstanding it