Oh, i'm not saying you wont get banned, i'm just saying that some companies have fears of bans and repercussions.

After initial contact with the company failed, I found assigning it a CVE describing the problem ( CVE-2017-14748 for example) got the ball rolling quickly.