I reported a different vulnerability to Amazon a few days ago. I've gotten a case number, but haven't heard anything beyond that. It's nice to see their timeline and know that they are responding and fixing stuff.