Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.
The springs are generally used to make sure you place just the right amount of tension on the cpu. If you tighten it too much, the mobo and cpu could be damaged. If you don't have any, I wouldn't worry about it too much. Just be careful when you're mounting the hs. Also, metal nuts can be used if you've got a non-conductive backing plate between them and the mobo.