From the artifacts they leave behind after the attack, broadly speaking.

They mean root access on the production email servers, not access to individual email accounts.

"any access to customer environments, production systems, source code, or AI systems" does not mean root access. It can also mean access to data.