As soon as a link is shared, each person who learns the URL is potentially a "culprit."
But regardless of what DRM scheme they choose, it's doomed to fail, all it takes is one person to crack the scheme and liberate the underlying documents. Alternatively, since 100 anointed blogs and media outlets will apparently have the right to download raw PDFs, all it takes is for one of their accounts to get hacked.