I think hackers need to realize that this type of reaction is the norm. If you find an exploit then use your discretion in deciding to report it, but don't be n

I think hackers need to realize that this type of reaction is the norm. If you find an exploit then use your discretion in deciding to report it, but don't be naive. There is no reason to risk martyring yourself for someone else's interests. The risk to those (including yourself) whose information is vulnerable should be taken into account, but countered by the risk that you will be persecuted for bringing the problem to light.