Maybe run it once, just to make sure it works, then contact the devs and say: here's my exploit. Please fix it. I'll disclose it on github in 90 days. (that's what researchers do with major comercial software, afaik)
Discussion
Definitely not leave it running full blast for weeks on end without saying a damn thing, and going out of your way to subvert countermeasures.