This response deepens my concern about the situation, rather than alleviating it.  In this response, you make it sound like calling this security researcher&#x27;s employer&#x27;s CEO was a reasonable escalation of the situation, and that is deeply concerning to me, especially given the actual text of the post Wes published here.<p>It also appears, based on your post, that you think that stating, approximately, &quot;I hope we don&#x27;t need to contact our legal teams or law enforcement about this,&quot; does not constitute a threat of legal or law-enforcement action, and I also find that deeply troubling.  While I think you could make a legal distinction that these weren&#x27;t <i>technically</i> threats of such action, any reasonable person in the researcher&#x27;s position would by <i>positively idiotic</i> if he&#x2F;she failed to <i>feel</i> threatened in that way by such statements.