These people are not employees. They don't agree to amounts before starting the work. They don't make promises. Nothing! I don't see how someone publishing some

These people are not employees. They don't agree to amounts before starting the work. They don't make promises. Nothing! I don't see how someone publishing something in that situation is a problem. Like OP wrote in this thread, it either is a vulnerability or it's not. In the latter case, just assume it's the cost of doing business and people will write "bad" things about your product?