sure publicly disclose it. but stay to reality. what you say is wrong and misses reality (just check LNBits for example) It leaves out that you did not run through the setup, that you opened up umbrel to the public net. etc. Maybe also engage with the related umbrel discussions. Even hinting to bad actors because of some config (which you seem to not understand) is imo wrong and pretty sad. and hinting towards somebody from the umbrel/alby community is stealing from you is also just hurting some of your beloved bitcoin communities. I hope it helps with your pain, but hate the thief and not some other open source bitcoin projects and communities.