This reminds me of the “DeCSS” case, where claims were made that a specific number was not allowed to be spoken or transmitted or otherwise shared. ( https://en.m.wikipedia.org/wiki/DeCSS )

Obviously the DeCSS people lost that argument.

Banning someone from saying “by doing X you can bypass security feature Y” is going to be a difficult one to get past the Supreme Court, at least in the USA.