When I worked in tech, we reported the vulnerabilities internally and pass them off to legal. Taking that to the government was legal's job. I am not gonna go

When I worked in tech, we reported the vulnerabilities internally and pass them off to legal. Taking that to the government was legal's job. I am not gonna go out of my way to "whistleblow on vulnerabilities to the EU" after I have done my job and reported everything to legal.