It's possible it was reported to Apple because they have a vulnerability bounty program, so they individual who reported it could get a reward. That might creat

It's possible it was reported to Apple because they have a vulnerability bounty program, so they individual who reported it could get a reward. That might create an incentive to report it to larger targets who may run larger bounty programs.