You can’t edit anything in your profile right now, which is why you can’t turn off anon reviews. No one can make a new account. No one can delete an account. That’s why it’s called read-only mode.
As far as renaming review.php, Manta and DG have enough work to do without making more for themselves. So, let’s allow them to concentrate on stopping the hacker’s access so we can get back to normal.
I’m not a coder, but I’m guessing that at the very least, it would mean renaming that bit of code in 22 discrete databases, as well as any cross-references elsewhere. And after the site is fixed, they’ll have to go back and find all those renamed bits and change them back, and hope none get missed because if I have to listen to anyone complaining about not getting reviews in whatever subdomain, after watching Manta and DG sweat for nearly 2 months to get things working again, I will absolutely lose my shit with said complainant.