i would have tried to direct message them, maybe on their Patreon on that one due to what it is, for a few reasons.
1. it keeps people from complaining about "oh why would you mention that" or anything to that effect
2. untill its fixed anyone who found out through the post can exploit it freely.
i tried to mention it through patreon but i did it via some sort of suggestion directory when i subbed on the site...still no clue what it actually was or if it was seen. but yea just an idea if ya find anything else of that flavor of bug. ^^