per gentlemen's agreement (something the soulless, kakfa-esque fucks at M$ will never understand), I can't elaborate further...
but if you ever find a 0-day / bug, don't pursue a bug bounty.
They will put a bounty on you, and squash you like the bug.
Nintendo threatening modders legally is literal child's play compared to the literal mob tactics MS and Activision used against what they perceived as financial or PR threats.