> … hostile to security researchers who report these issues.

Do you have an example?

I don't have an example, but I know the pattern. You are working on your software, security researcher finds a bug, it's in your project, for you it's just another bug, but for them it's a point on their CV, so they make a theater about it, and expect priority in dealing with it. It must get tiring if you get many of these.

I have numerous examples of security researchers being hostile and impossible to work with (but cannot share them unfortunately).