My guess is he found this vulnerability on accident, freaked out, and tweeted about it. Probably has limited infosec experience.
So he's either not reading his replies or he's being deliberately irresponsible. My guess, based on his profile and online behavior, is that he's trying to ride the coattails of getting some exposure online.