I would also expect a spy agency to be hoarding exploits. I don't think that's the concerning part of the reveal. Here's what I gather are the main issues the analysis discusses.
1. Poor control of the resources means a proliferation concern. Hacking tools are not classified, because it would then be illegal to deploy them if they were. But leaving them unclassified makes it easier for them to spread outside of the agency.
2. The CIA is duplicating the NSA's capabilities for no real reason other than institutional rivalries.
One of the lesser issues I thought was particularly interesting is that the CIA works to make attribution more difficult, and in particular, to pin things on the Russians. That's got to be relevant in the current political climate.
1. Poor control of the resources means a proliferation concern. Hacking tools are not classified, because it would then be illegal to deploy them if they were. But leaving them unclassified makes it easier for them to spread outside of the agency.
2. The CIA is duplicating the NSA's capabilities for no real reason other than institutional rivalries.
One of the lesser issues I thought was particularly interesting is that the CIA works to make attribution more difficult, and in particular, to pin things on the Russians. That's got to be relevant in the current political climate.