>Since when is an individual's personal blog "journalism", and therefore expected to live up to that standard?

If the author is going to pretend to be a journalist of a security researcher, I see no problem holding their work to the ethical standards expected from those sorts of people.