You make good points. How would you improve it to clarify the aim is to be generally useful for both sides? For example, when I personally discover a security

You make good points. How would you improve it to clarify the aim is to be generally useful for both sides? For example, when I personally discover a security issue, I want to be able to report it to a company, and also include a link to this doc, and ask "Here's how I suggest we interact and why; what do you think?".