I've found that if you are going to report a security flaw to a large company that doesn't have a security team that monitors security@ your best bet for a resp

I've found that if you are going to report a security flaw to a large company that doesn't have a security team that monitors security@ your best bet for a response is to find the email of an employee, the higher up the better, and email them directly. Rather than emailing a support@ address.