to mitigate a significant cybersecurity risk to the their High-Performance Computing environment

This is absolutely a lie. If there was a "significant cybersecurity risk", the data access would be shutdown immediately, and it would stay shutdown until the risk was remediated. Instead, when there was pushback, the shutdown was postponed. That's not how anybody deals with a cybersecurity risk.