As I can see here, the rules of responsible disclosure were not respected. Just to make sure, any security issue with our products should be reported through appropriate tools instead of being disclosed in a public forum. Also, LinkedIn is not the best place to discuss those things, by far, and it is a very strange choice by the author, even for a red-team hacker.
Without many details, it may be that the policy is not configured according to the best practices, as already suggested in the comments on LinkedIn.
I have already reached out to relevant people to review this and provide a response. I am confident that an official response will be provided once all the details are clear.