No good deed goes unpunished. I learnt this lesson in high school when I disclosed serious security vulnerabilities in the schools IT systems and statewide VPN

No good deed goes unpunished. I learnt this lesson in high school when I disclosed serious security vulnerabilities in the schools IT systems and statewide VPN and firewall/censorship solution. I was effectively expelled (in technicality "asked to leave"). Unless someone is paying you just don't bother. Even if they are paying you stick to the systems in the brief.