As a user, I definitely welcome it. It's necessary precisely because companies like this lie about their security practices and endanger their users. The quest

As a user, I definitely welcome it. It's necessary precisely because companies like this lie about their security practices and endanger their users. The question isn't whether it should be done, but whether it should be done anonymously or openly.