If the service is publicly available to people, I doubt it would matter. Vulnerabilities are disclosed daily for publicly available services. I remember someone

If the service is publicly available to people, I doubt it would matter. Vulnerabilities are disclosed daily for publicly available services. I remember someone publicly disclosing the vulnerabilities in the Indian government's Aadhar app, a public service, on twitter a few days back. I doubt they took down his tweets. If the service is not publicly available or is some kind of internal, enterprise tool, then it would be a different matter.