Yeah, the Twitter policy here is 1) ask the user to delete the bad tweet 2) tell the user to change their password if they think they've been hijacked 3) intern

Yeah, the Twitter policy here is 1) ask the user to delete the bad tweet 2) tell the user to change their password if they think they've been hijacked 3) internally investigate any credible claims of a security issue on their side. They have zero interest in allowing users to participate in any such investigation.