I agree with you, I don't think the bug report was a security issue or even a bug. It's like telling Google that searching for bananas returns pictures of apples and reporting it as a vulnerability because self-driving cars might use the Google results as training data.