Offer them to hire you for an extensive security review for more money
I am not a security researcher - a full stack engineer who likes to look for vulnerabilities in my free time