No, I think they learn vulnerabilities of different systems and this way they know in-depth things about different systems and can write this papers/articles. This knowledge come not from academic discipline, but from own research/learning
IMO, the approach to that is something that must be shared with the community as it is the key to in-depth security. More people knowing that means better development.