I will rephrase it, the intention is not to push responsibilities, we are merely asking our customers to let us know if they ever find a vulnerability. Thanks for the feedback!