“urging customers to pull their management interfaces off the public internet or restrict them to known IP addresses.”

Sounds more like pebkac and less of a big deal. Management interface should be in your management VLAN, plus I don’t know another vendor that can touch them in terms of security features.