So this "bug" you've found is literally that a machine being remoted into doesn't lock out physical input?

Apple would have to be staffed by idiots to pay you for "noticing" that.

Sure, it should be fixed, but if you expect any more than perhaps an apple sticker in the mail, you're deluding yourself with the grandeur of "hacking a multi billion dollar company"