Why should you provide any time to Facebook to respond with regard to a feature that works as intended (but can – like most features – be used for other purposes)?
The report/block function is a classic in this regard: In the best case, it helps Facebook to identify unwanted content. In many other cases, however, enough reports simply lead to the automatic disappearance of maybe controversial but otherwise completely acceptable content. In general, the freedom of speech should of course prevail, i.e., reporting content as well as blocking content should the exception and not the norm.
It took two months for a response for me from their security team, and in the end their team dismissed my bug as a discrepancy in privacy settings (it isn't). For me at least, it's not really worthwhile trying to make an information leak a publicly known fact — nobody really cares.