Maybe it’s me but what I read in that paragraph is: If you use the SRD, you are required to report any vulnerability. If you didn’t, you are not required but e

Maybe it’s me but what I read in that paragraph is: If you use the SRD, you are required to report any vulnerability. If you didn’t, you are not required but encouraged. It doesn’t say if you used it you aren’t eligible for reward