"Staggeringly complex"

Another very possible explanation is that GnuPG is the most notable implementation so that was the main focus of the researchers. When they found an issue that worked against GnuPG they mostly tried that issue and minor variations against the other implementations, or otherwise just spent less time focusing on them.