[sleepyhead]

"Security Researchers" does not know security.txt exists anyways.

[a3w]

Usually, you can find contacts instead of writing to random admins in abuse or security info. Helps them make money, so most should know low-hanging fruit like this.