Just want to point this out: "strongly caution" is what the TSA flak told the reporter (according to the reporter). That doesn't necessarily mean "don't report this or we'll send you to Gitmo". It most likely was expressed in the context of "you're going to look stupid/spread misinformation if you do."
I'm not saying the TSA flak won't be vindictive if a reporter covers the story. I'm just saying, there's not an immediate reason to jump to this conclusion. You don't get to be TSA flak by writing thinly-veiled threats that are easily retrieved through public records requests.
You have to remember that journalists rely on sources, and some of those sources come from government agencies. A strong caution contains an implied threat of non-cooperation, i.e. if you cover that story, we will be feeding other journalists more info than we feed you.
We've already been seeing this a lot with the current administration, regarding trying to ban Fox News from the press pool (ok, I am no fan of Fox News, and I was a fan of Obama in 2008, but COME ON). In context, this is a meaningful threat.
However, I wonder if the issue has to do more with the "get rid of the TSA" rhetoric in the post than it does with the security hole.
You need general, sure but the TSA management is not Apple, or even a politicians who uses media manipulation to win hearts and minds. It is just inept damage control trying to cover up corruption and incompetence.
Why would a PR flak ever stop a critic from embarrassing and discrediting himself? That would be gold for the TSA.
The only exception would be if the critic is so powerful that even a false story would hurt the TSA. I don't think SmarterTravel is that much of a force. At most, this "caution" is concern trolling.
Let's suppose the story was bogus and the reporters would look stupid (neither is true). The TSA might still not want the story to be spread widely, because people will remember the original story, but not the corrections hidden in small print.
I'm not saying the TSA flak won't be vindictive if a reporter covers the story. I'm just saying, there's not an immediate reason to jump to this conclusion. You don't get to be TSA flak by writing thinly-veiled threats that are easily retrieved through public records requests.