Presumably, by publishing the hash on a public blockchain they are creating a trusted record of when the hash was published, which can be verified after the fact and which cannot be modified or removed, with planet-scale proof-of-work level of cryptographic assurance.

If they published the hashes on, say, their webpage or some third party's webpage, nothing would prevent them (or the third party) from redacting or removing the hash after the fact, given sufficient motivation.