I found the best approach is to search LinkedIn for someone at the vendor that's closely connected to me, then compose a cheery message to that person introducing myself as a fellow developer and parent of a user, ask the best way to inject a bug report etc. This actually worked. Ymmv of course.