While your first point bears repeating ad infinitum, and everyone who has direct access to the DP and finds something off (however minor) should be filing rdar

While your first point bears repeating ad infinitum, and everyone who has direct access to the DP and finds something off (however minor) should be filing rdar reports before blogging, the effects of your second point about the NDA is open to interpretation. There's a clause in the confidentiality agreement that prevents it from covering anything that's public knowledge through no fault of your own. Given the extent of the Apple news machine, very few aspects of DPs are outside of public knowledge for very long.