That's a fair point. In practicality, I don't see a need for this .txt file to be present. There are other .txt files, such as humans.txt, that don't have wid

That's a fair point. In practicality, I don't see a need for this .txt file to be present. There are other .txt files, such as humans.txt, that don't have widespread adoption, due to lack of generated value. While there are many issues inherent in reporting vulnerabilities, this .txt file will not solve them. Not only is the file's existence error-prone from a maintenance perspective, but my experience has shown me that such a file is not needed. Due to these factors, I believe that the existence of such a file is unwarranted complexity without a corresponding level of benefit.