Slight mix up
You’ve confused SIM OTA that Gemalto describe with terminal OTA settings updates.
I believe checkpoint are referring to terminal OTA settings updates.
The SIM OTA updates were previously breached by Karsten Nohl:
https://www.theregister.co.uk/2013/09/23/white_hat_sim_hacker_disillusioned_and_dismayed_by_operator_response/