Each tech vendor should assign effort and resources, including people, to handle external security reports about their products. Sometimes it’s really hard for researchers to know who they should inform about a serious flaw, because the right people are not identified.
We in the security research community try to inform vendors first, because we want security gaps fixed, so let’s cooperate and make the world a safer place.