Large incumbent companies are incredibly slow at handling cybersecurity related disclosures.
Reports are important, but they are irrelevant when teams take days, weeks, or months to respond.
Take personal opsec seriously, because companies often don't.