@GossiTheDog @wdormann paid support is definitively outsourced. Not sure about security bug triaging, but probably the same.