We, like many companies, run a responsible disclosure program. We get reports like this all of the time. There’s a lot of noise to wade through, but we occasio

We, like many companies, run a responsible disclosure program. We get reports like this all of the time. There’s a lot of noise to wade through, but we occasionally get good, valid reports. We pay those a reward and fix the issues. Our understanding is many of these reports come from people who landing a single bounty is equivalent to a month of income.