Users are going to use whatever mechanism to provide feedback that they find first. They don't know what's a security issue, what's a bug, what's a sales request, and what's a support request. All I can say is that I hope whatever system you use for collecting security reports is shared by those other teams, and you just change the "security" tag to "ui" and move on. Because if you don't do that, you know whoever is reading that "ui bug" queue also has a slack channel where they make fun of people filing security reports as ui bugs, and then proceed to drop them on the floor.

Always be careful about shipping your org chart.