I'm not surprised because the disclosure process of https://hackerone.com is completely and openly public.

But they have also disabled Linux as one of the products that they work with.