Yeah most companies simply don't care, and/or they don't have the processes the address issues like that

They also likely get dozens of similarly looking messages each day from "developing country" "pentesters" for irrelevant issues, so your message could have also ended up with similar looking "spam"