I've reviewed hundreds of security reports over the last ten years. I have yet to see a legitimate one. This is good (no security bugs!) but also a massive wast

I've reviewed hundreds of security reports over the last ten years. I have yet to see a legitimate one. This is good (no security bugs!) but also a massive waste of time, because I do need to review them because what if there is an actual serious report? Is it "spam" in the sense of Nigerian princes and penis enlargements? No. Is it "spam" in the sense that it's the same useless crap being repeated ad nauseam? Absolutely.