Been seeing that guy's "I found exploits in Bsky and they won't fix them!!1!" post going around again. I am also a security researcher, and I do not take the issues raised particularly seriously. I would barely call them exploits, and it's completely understandable that they aren't a priority.