years ago I found a way to discover personally identifiable data for any given youtuber through its API

I reported it and the reply I got was "it works as intended, not an issue"

using this exploit I was able to find almost any youtubers social media accounts and their real names

Another time I caught a famous youtuber threatening to doxx people who were criticizing him in the comments and reported it and nothing came of it saying they didn't see any issues.