It's still an exploit in their app that can be abused on their users.

I see nothing wrong with submitting it in multiple places, it's still better then being sold darknet.