how about instead of completely ignoring the issue and saying everything is okay np, you take active measures against this blatent issue by maybe considering reworking your account security/recovery systems, as they are very flawed
Edit: nvm you edited your message, glad you guys decided to look into it
My initial message also included lines to indicate that we're investigating but that might not have been extremely clear.