If they fixed the exploit then what do you want them to do? Do they need to wait an arbitrary amount of time before setting it to resolved?

I like the fancy gradient INCIDENT REPORT image as well. At least it looks fancy and AI-ey