A security researcher told me to close my OAuth registration endpoint. I said no.

Last week I got an unsolicited security report about my QR code service. It was polite, it was...