update :
Hmm, why did the Bugcrowd triage team not forward a clear Critical auth-bypass report to the ShareFile team? Interesting!
Also, it is worth mentioning that I submitted the report to the VPD program (which means I will not get paid for the report ). I was just trying to help, but ......