FTA: "The difficulty I encountered reporting this serious vulnerability delayed my report one week. It might have caused a longer delay if I did not have contac

FTA: "The difficulty I encountered reporting this serious vulnerability delayed my report one week. It might have caused a longer delay if I did not have contacts at Samsung who could help" I haven't had to report anything too serious, but I've found this in most big companies (including Google). It's seriously frustrating, but I wonder where the balance is between being too hard to contact and opening the floodgates.