@sophieschmieg I think this is super. However, I can't help but note that the way thing seem these days, if something somehow goes wrong related to this being made externally available, you'll be the one under the hot light. Hoping that doesn't happen.
@lauren I know of stories within ISE where public communication went wrong, and the individual in question was fine, we treated it like any other vulnerability, not blaming it on anyone, but fixing the process where it needed fixing. I know that isn't necessarily universal in the company, but I have some trust in my management chain, otherwise you wouldn't see anything published by me.