This can be escalated even further I suppose, like a xss or phising attack. How can they ignore it?

This no longer works, looks like they quietly fixed this. (unless my attempts did not work on my own channel)