Is responsible disclosure not a thing anymore?