This is where anonymous notification / bug reports are useful, and then follow ups in public if no action after a period of time.