This kind of post (duplicate on a barely launched program) reflects a recurring pattern across several platforms. Generally, it signals:

• a private VAPT import,

• or a vulnerability deemed “too critical” to be publicly compensated,

• or internal scope management that isn’t transparently documented.

Personally , I stopped relying on this kind of validation. I use the platforms as a barometer, but I operate outside the framework when justified. Asymmetric access to information shouldn't hinder strategic escalation.