Guessing you already know, but in case anyone doesn’t the concept of a “white hat hacker” is appropriate here:
They’ve found a vulnerability and are alerting the airlines about it, and are giving a few examples of why they should be worried. Agreed they’re not the most convincing examples, and I can’t think of a way to fix it that isn’t a massive pain in the ass for everyone, but I’m glad they’re making a stink over it if only to point out that security will never be perfect so please let us wear our shoes through airport screenings again…