University study finds flaws in criticism of St. Jude cyber security