My favourite part form the original report was that paradox had no way to find their security team ( to contact) and their security page just had "We worry about security, so you don't have to."
https://web.archive.org/web/20250208000940/https://www.parad...