Reports on this incident have emphasized that Nest security wasn’t compromised. This Nest owner had an insecure password that he used at multiple sites - the hackers used that insecure password retrieved elsewhere to access his in-house equipment.
In other words, it was compromised.