Presumably they were paid for finding the bug and inn accepting relinquished their right to blog about it.
No, you relinquish the right when you agree to their TOS irrespective of if they pay you.
No, you relinquish the right when you agree to their TOS irrespective of if they pay you.