Fun with Software-Defined Radios: Mapping the Spectrum in the Mission, SF 11 years ago
In theory, everything you write is correct.
In practice, none of it matter in this case. The leakage of rectangular window is ~30dB at a distance of 30 bins, and they aggregate more than 30 adjacent bins together ("re-bin"), making the leakage no more than 1 bin. To make things worse, the dynamic range of their receiver barely scrapes 40dB (peak) or 30dB (SFDR/SINR) - rendering the use of a more sophisticated window a moot point.