Yeah, he mentioned security.txt in the article, but complained that few implemented it.

I guess that even if someone who apparently does computer security isn’t familiar with it, that Average Joe probably has no idea. Maybe there’s an argument that there should be some sort of browser support for “report problem wirh this page/site” that sends an email to an appropriate address with an URL for the page and comment so that people are more aware of it.