Jail time for reporting vulnerabilities? This is some Poe's law shit.