Did you message them at their security disclosure email? What did they say?