I've been on the other side of something similar to this. At a previous role, a security researcher was falsely claiming we had a backdoor. We considered litiga

I've been on the other side of something similar to this. At a previous role, a security researcher was falsely claiming we had a backdoor. We considered litigation, but ultimately decided not to for a variety of reasons, but a major one was that there was no way that the optics would be anything other than "softare giant sues researcher," and we would likely only serve to draw more attention to the claims. I'd entirely forgotten about the Ubiquiti breach until today.