> Adafruit’s reporting concerns a matter of public security interest and was conducted in the ordinary course of responsible disclosure