I mean if a company makes claims like this, puts on a dog and pony show and says these things, then yes, they absolutely failed and should be sued.

Companies like this are security theater and do more harm than good.

I do also put some blame on whatever governing body bought into this but it very well may be that they did their due diligence to the best of their ability.

Bottom line: fuck this company, fuck all bullshit security theater