I haven't had much success communicating about security issues with the team through HackerOne. Lots of dead air. I've had much better success contacting them via the security@ email. Even there though, it would be nice if there was a bit more communication. So I second the hope that a Security Czar will improve communication between researchers and the security team.