@dougall after reading through all that I can see why it might not fall under their VRP, but my *goodness* it's hard not to wish they'd throw the initial reporter a few bucks for the effort and persistence to find something that turned out so *weird*

@rf Yeah, I'd argue that this finding is more valuable/notable from a security perspective than many that do get rewarded, but I'm glad I don't have to make those decisions.