Newsflash; nation state, or state sponsored hackers will gain access one way or another. The vector here just happens to be Sharepoint, but could've easily been something else, like a good old social engineering attack.
Your shortcut likely isn’t working. I tried it, but it didn’t reboot at the scheduled time. It briefly turned on to show a dialog asking for confirmation, but since it was unattended, no one approved it, so it never restarted. You can confirm it’s failing by scheduling it to go off while you’re there, or download a System Status app that shows boot time.
