My thoughts on LE actively revealing NB’s vulnerabilities (as opposed to confirming/denying reports made by others) are:
1. If the vulnerabilities have absolutely no relevance to the course or findings of your investigation, they shouldn’t be released, full stop. Getting the jump on potential gossip doesn’t seem like a pursuit in which LE should engage itself. Let tabloids and blogs post whatever blather they want, don’t legitimize it or reference it, and let private citizens harmed by that blather take those entities to court, if appropriate. *Edited to add:* Any “blather” that rises to a criminal offense, arrest the perpetrator.
2. If the vulnerabilities are and have been relevant to the investigation, the “high risk” quality of the disappearance should have been reported from the outset. Not details about the vulnerabilities, just the fact the misper is high risk. An exception to this might be if investigators are convinced by the evidence that there is no hope of finding the missing person alive, and therefore describing the high risk status would be unnecessary.