Well, since you seem to have a top comment there - you don't see an error in the way the initial security responses were? Why didn't they guide him into providi

Well, since you seem to have a top comment there - you don't see an error in the way the initial security responses were? Why didn't they guide him into providing the information they needed, to ask him specifically? Or point him out to the whitehat program, etc? They have no responsibility there - is that what you're implying?