@GossiTheDog He doesn't outlaw #Govware tho, thus only upsetting control-freaks too lazy to use #Microsoft365's Dashboard, but not even discomforting #NSO and #Zerodium as #Cybermercenaries For Hire...

@amuse @k8em0 Personally, I'm not a fan of "coordinated" vulnerability disclosure.

In fact I think that #Google's #ProjectZero approach is more than graceful enough.

Big #CCSS vendors like #Microsoft should be glad if someone chooses to look up the security.txt and contact them with details and not straight-up sell an exploit to #Zerodium and other #Govware - #Suppliers, cuz those pay better and ask fewer questions.