The difficult thing with this sort of article is that while it generally sounds plausible, the layperson reader doesn't know about the specifics. I don't know anything about BFO spoofing or handshake rings. This means that all I can really judge this article on is its presentation and logical reasoning, and while both seem okay, there's no way for me to evaluate the premises and finer points that the piece critically…
You can also ponder it from the perspective of a rational hijacker. Why fake BFO when you could have just had no pings at all?
Because this is where you can bury your evidence real deep.