Yes, but that has problems too, as I pointed out in my previous post:

> Finding the reporters may be hard, and even if they are inclined to comment on when they found it, you can't really trust them, since their incentives aren't clear either. They may love the browser, or hate it...

That's a technical problem, nothing more. At the moment of sending off the message to the company you could post your message digest to a secure server somewhere.

Only if the reporter wants to go through hoops like that. The more work it is, the less likely they are to want to do that. That's especially so since there's no advantage for them in doing so...