It's good that they're disclosing this, but they are not doing anything particularly brave. While it's understandable that they would choose not to put their business at risk, a true act of bravery would be to refuse the requests in the first place.

^ that is a medium harshness level, I think.