It's all in the GPG keys. There are 3 different names all using the same key. I'm not 100% sure what I'm looking at, either, but that is what I assume they're pointing out.

The CTO of Coinkite is both people. He’s the one who introduced the Coldcard firmware bug.