The letter was sent to Apple Product Security. We saw the email screenshot this woman posted to Twitter. But it didn’t include the response from Apple Product Security. That part of the email was cut off. Let’s see the response.
The first link shows screenshot of a bug report filed on the 25th January the letter is also attached to the bug report. The screenshot shows that this was reported on Friday at least.