

The article says tap water was available at the venue, but it is not served at the restaurant.
It doesn’t mention a public water fountain. It does mention that Italian law doesn’t require tap water be available, tho English and Welsh law does at least to some extent.

Responsible disclosure is a kindness; it is not required–especially if/when the vendor doesn’t act in good faith.
MS shouldn’t be able to silence researchers, but that’s what the industry gets by voluntarily clustering around a single, proprietary service.
I don’t think either party should be compelled to take (or reverse) any action.