A fun side effect of this is that if you aren't a security researcher by trade and you report an actual security issue to a bug tracker, the first dozen respons

A fun side effect of this is that if you aren't a security researcher by trade and you report an actual security issue to a bug tracker, the first dozen responses will be arguing that it isn't a security issue rather than engaging with whether it is a bug, since this is the default response to reports that claim to be about security issues