Imagine you sell a very popular hacking gadget, but you don't have a dedicated security@ email and want security reports sent to support@. And then you don't respond 🙈
It's a minor issue, nothing important. But you would expect at least a "thanks we got it".