Hi Michael
Searched my mailboxes, I always use the same e-mail for everything moodle.org, no response, neither from BugCrowd nor moodle.org team. I received your direct reply 20 min ago. Will respond to that after going through the evidence again, which could be the weekend.