Even having an email address to send reports to would be good for a lot of websites. I sometimes don't bother reporting these issues for fear of being threatened with legal action.
PS: I'm an ex-paranoid. things might have changed since I left, but I'm pretty sure they'll still listen to reports.