Hah! I do think the report is legit. I would not have come here otherwise seeking advice.
In any case I understand the sentiment, I am the solo-devops person for our all our platforms and it does get annoying with some of these “beg-bounty” hunters. I share your frustration though.
Cheers.