That's why you always do anonymous immediate full disclosure.

Nothing else is ethically viable. Nothing else protects the researcher.