Fun website, but most of these really don't cross the line from "aggressive marketing" into "dark pattern." If the site reps are listening, why not let me browse the worst offenders first?
tl;dr: Send an email message with a carefully crafted file attachment. Triggers a parsing bug (presumably a buffer overflow). Attacker could cause several bad things, including adding a root user. Yikes.
AFAICS, it wasn't the journalist's fault. It was the Swiss PR spokesman. While the company concerned made a mild followup statement implying the journalist misunderstood because of a translation error, both parties spoke Swiss German as a native language.