The team gives exact pointers to its reporting forms on its online services, with guidance on appropriate use and when and how to use them (different forms may exist, for example for incidents and for new vulnerabilities), and repeats any separate e-mail addresses for form-based reporting.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.