Me: Here's a bug in Google Sheets that exposes deleted content to third parties.
Google: Not a bug. Working as expected, closing issue.
Me: Really? I was personally harmed by this bug while using the application.
Google: Actually, it is a bug but it's a longtime known issue, therefore you are not eligible for bug bounty. Closing issue.
Me: Here's a bug in Gmail that allows spoofed email to scrub DKIM failures and appear legitimate
Google: "Won't fix (Intended Behavior)"
Me: Really? Google intends to allow spoofed email to appear legitimate in its interface?
Google: Actually, it's a known issue
For both you hear nothing for about 10 weeks, then it is either closed as "expired", or "won't fix".
Last time I checked, both vulnerabilities still exist.
You: We are OK to publish a blog post about it then, right?
Google: ...
I've written the blog, and I'm going to publish it on...
Additionally, the first articles announcing the vulnerability tried to link it to Chinese/Russia hacking. Shove that propaganda directly back at yourself (i.e., Google; a US-based company). Google left the backdoor wide open for anyone to exploit, foreign and domestic. And, it was definitely exploited by both.
Google has real issues. Not sure what happened after 2019, but it's not great.
Me: here's a bug in Google Play Services.
Google: Not a bug, working as expected, closing issue.
Me: posted the bug on my blog, and it's get extensive media coverage.
Google: It seems we were wrong! It is indeed a bug. We will return to you in a few weeks.