Ridiculous vulnerability disclosure process with CrowdStrike Falcon Sensor
Refusing to interact with an existing security process (HackerOne) and demanding a personal contact instead for a minor issue is certainly an interesting take.