The author raises the point that his account could have been marked due to fake information submitted via their law enforcement request form. It occurs to me t

The author raises the point that his account could have been marked due to fake information submitted via their law enforcement request form. It occurs to me that companies don't run bug bounties and authorised pentesting programs for process flaws - I assume that would be deemed out-of-scope "social engineering" even if it doesn't involve any psychological trickery and just involves uploading a forged official document and seeing if they even try to validate it at all.