If you publish something online, that's also a responsibility. If they don't want that, then they could just have made a comment somewhere "yo, i've had this container online on port 22 and this is what happened, yolo".
Same for open source software btw.