I am not defending CrowdStrike here (my work laptop, that I am typing this on, is molasse-like thanks to them), but their PSIRT team (they have one right?) is just another team in the corp machinery. What PSIRT team and the engine team decide to respond have no effect on what the analyst team decides to do.

Do no harm and cover your ass. No one is going to complain a false positive on a custom PoC binary....right?

Everything else, yeah those are pretty shitty.