Those of you who publish a security.txt - how many reports do you get, and what's the typical quality level?
If I push to add one to my employer's website, will our security team thank me for doing so?