buttondown.email
Replace PGP With an HTTPS Form
To recap, my point is that you are probably fine with plain email for vulnerability reports, but if you want to go the extra mile, an HTTPS form will probably take you the rest of the way.
The online whiteboard of Kristofer Palmvik