I think they’re saying that it isn’t clear what the outsourcing chain was that led to North Koreans doing this animation work.
Hacking has lost all meaning though, case in point that public official from Minnesota who accused a journalist of “hacking” because the journalist opened up their browser dev tools pane and looked at the client side code.