I don’t mean literally the same cookie, I mean having a cookie on each device associated with the same nytimes.com account.
You’re never going to know exactly what happened but I think the circumstantial evidence points much more at nytimes.com than Apple.