This doesn't need to be complicated.  If you find something egregious in our software, please just let me know in the e-mail noted in the security.txt file.  I'm just one guy.