I find svisser's comment to be more than a little snarky. Reporting observed security problems to the proper authorities is part of being a good netizen and benefits us all.
This is a legitimate question to ask before going ahead with matters like this. Reporting security vulnerabilities does come with risks and should be evaluated carefully.
Mostly gaining positive reputation inside of my country as a security researcher.