I feel like the fact they paid the same party that investigated them is an obvious enough conflict of interest to dismiss this out of hand. Whether the report is actually trustworthy or not, there is an incentive to come to a conclusion that aligns with whomever paid them and that alone should make people question the conclusions being made.