Can't they just idk release a list of the images that are likely to be impacted unless the owner takes action?

I don't care much of the business decision, it's their house.

I care for the persons I support whom use docker and I dont see a way to prepare them without sounding like a crackpot and looking like a fool if they after making noise turns out they aren't impacted.