Do you report bugs or GDPR issues?

I love reporting bugs and GDPR issues whenever I notice them. When I am talking about GDPR issue I mean obvious things like non-secure websites on which you have to fill a form with personal details to ask for a birth certificate ( http://etatcivil.evreux.fr/ . Can you see the missing 's' ?)

I feel like I am doing a favour to the company to which I send the report and that I am contributing to make the internet a better place. However most of the time I am being ghosted. It actually only happened once that a company for which I am not paying a lot of money fixed a bug I reported.