“Neutral reporting with subtle concern framing. 'Vulnerabilities' and 'fraud claims' suggest problems without catastrophizing language or explicit alarm.”