Depends if you are dumb enough to disclose any vulnerability without a bug bounty program without protecting your identity. There are enough horror stories out

Depends if you are dumb enough to disclose any vulnerability without a bug bounty program without protecting your identity. There are enough horror stories out there that an anonymity-first strategy is obviously a good idea.