This sort of thing teaches people to exploit or ignore rather than report. Anyone who reports should be commended, even if they did real hacking (which using dev tools on a web browser is not.)

Someone's going to probe your system; you should be glad to hear about it in email rather than in the news or your accountants or from angry customers.