Whoever came with those policies doesn't seem to get that the harder you make responsible disclosure the more attractive irresponsible disclosure is, and easy enough to do anonymously. The policy stems from a deep culture of CYA and will instead find them pants around the ankles soon enough.