I can guarantee you that John Mueller never said “all links in a round-up should be NOFOLLOW.’ Maybe you misunderstood. The ONLY links that should be NOFOLLOW are links with a sponsored or advertorial perspective. Unless someone is paying you to be in their round-up, you don’t need to NOFOLLOW the links. You’re just fine.