@sam I ended up asking press@ and got a good answer right away. I was looking for something like security@, but went with press@ as this was a public issue already. (Not sure why git log says upstream security fix was merged Monday but release took until Friday, though.)
The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!