I scanned this report and I have to say it seems rather ambiguous and they did not really do a proper sample size of antivirus software. Products like malwarebytes, sophos isn't listed.
Using the virustotal online scanner is just a cop out because it cant do any behavior analysis since its just a file scanner!
Saying things like: "For certain antivirus vendors, it may take up to four weeks to detect a new virus" Who are these certain vendors?
What about heuristic detection? From what I understand products like bitdefender scored a 100% detection rate on recent tests for both behavior and existing threats.
What they should have done instead of publishing a vague "some AV solutions is a waste of money" is to do a reverse version of this paper and say "here is a list of the best protections out there and this is their current shortcomings"