I'm mostly amazed the author didn't land in jail, which is the normally the response to reporting this kind of thing to authorities.
“fun fact: this entire website is written without any javascript […]”
and “19 years old”,you know there’s hope for our future.
I love the line near the end of the article: "So in the end, I was down 10€ in domain fees, there was sadly no bug bounty (I thankfully didn't get my door kicked in at least)."
Makes me cringe, imagining what that would be like.