I am now questioning the wisdom of having shared this story, and I apologize for derailing the discussion.
But the shoot the messenger aspect of reporting vulnerabilities is also very relevant. It’s just the nature of forums like this that some things bubble up to the top and dominate the discussion. Hard to say it’s your fault for retelling a story.