I think I remember seeing a blogpost about Honey extension being a very bad idea from security perspective way before the public outcry and it might had mentioned the attribution(right term?) too.
I would have thought was obvious from the beginning that Honey was making some of its money from affiliate programs; affiliate programs are the standard thing that "shopping" extensions use to make money, leaving aside the much shadier things that even more malicious extensions do (see the various articles on the offers extension authors receive).
I'd always assumed the people promoting it made more money from the sponsorship than they lost from lost affiliate links. The recent discussions suggest that's not the case.
You can and IMHO actually should blame them for promoting crap. No sympathies on my part towards promoters of Honey, to be honest. Especially the so called "tech" channels. But this time they've tasted their own medicine.
BTW., here's a very interesting comment about the issue with regards to LTT: https://old.reddit.com/r/LinusTechTips/comments/1hkbtlr/peop... .
Their marketing claimed that Honey automatically applied coupon codes for various online retailers during the checkout phase. Nobody really had a problem with this.
What got found out and landed Honey in hot water, is the affiliate link hijacking behavior which they did not disclose. Basically, any time you follow an affiliate link with Honey installed, it replaces the original affiliate code with their own. Leading to this flow:
1. YouTuber takes Honey Sponsorship and their followers install Honey.
2. YouTuber posts new content, with affiliate links for equipment or parts.
3. YouTuber sees their affiliate links aren't getting near the amount of traffic they used to despite their videos performing just as well as before.
Remember: before MegaLeg's video the only thing that was known was the affiliate code ripping, and it was only known by a handful of YouTubers warning each other in private.
My personal opinion is that they should have sounded the alarm, even though the only people getting scammed were creators, because it was a broader attack on the whole YouTube ecosystem and not just LTT. Hell, there's even precedent for LTT making self-interested YouTube videos; remember when their Amazon affiliate account got shut down and they had to beg Dread Pirate Bezos to be reinstated? YouTube creators that are pushing people to products and services should be willing and able to completely trash those services if they turn out to be shit - or, at the very least, are being shit to them.
Even something basic like exposing how much these sponsors pay out in commission instead of towards the quality of their products would be hugely negative publicity.
It was something a youtuber I was subscribed to was talking about in how he was still seeing his affiliate numbers drop overthe last year or so, and it was actually putting his existing deals in danger. Then as a test after the expose, he asked a few family members who did use his links if they also installed Honey. He definitely never advertised Honey himself.
ideally, ones that don't want to secretly sap at his revenue stream.