Whether or not such a file makes sense is another question, but I find the mentality of the "Disclosure" field quite puzzling. It is not up to an affected party

Whether or not such a file makes sense is another question, but I find the mentality of the "Disclosure" field quite puzzling. It is not up to an affected party to decide what disclosure terms apply. After responsibly disclosing an issue to a site a security bug finder should disclose it to the public, whether the affected site likes that or not.