I simply assume that anyone doing vuln disclosure who has a Twitter blue check is not someone I want to pay much attention to