I guess you missed out on this part -

"In the wake of responsible behaviour, on discovering these serious security flaws that violate user-data privacy, I decided to flag them to Emirates through Twitter DM in October 2017. Please note that I could not find a dedicated channel for reporting security bugs on Emirates website.

I also wrote an email to the Product Manager highlighting the security flaws. I was met with a deafening silence."