The there's the additional factors.
Many just base their analysis on a single file shared by @searchmartin ca. 48 hours after the actual leak, and not the leak itself
You can't judge a software system with 100 Gigs source code based on 1 text file :)