I too reported a similar issue very recently to VRP and got the exact same response, except in the end there was a line "If you think we've misunderstood or c

I too reported a similar issue very recently to VRP and got the exact same response, except in the end there was a line "If you think we've misunderstood or can provide a convincing attack vector, please do let us know!" I think OP did not post this line in the blog; which makes Google look like they don't at all care.