Nope, this is standard operating procedure for security researchers.