Indeed, that's another overstatement in the article:

Calling this kind of embedding "steganographic", although the malicious code appears clear text within the image raw data.