Holy fuck.... how not to deal with receipt of a vuln report. Even if the legal action fails, it'll still cost the researchers money, time & stress to defend - all because they were decent and pointed out issues. https://twitter.com/DI_Security/status/1304053628248956928