[pvg]

"Responsible disclosure policies" are mostly vendor exhortations to people who do a public service (finding vulnerabilities and publicly disclosing them) not to embarrass them too much. The fact they contain silly boilerplate is probably just a function of their overall silliness.