Comment by nananana9

It still probably makes sense to alias it to security@mullvadvpn.net for privacy/security concerns.

I'm not familiar with how you run your company -- without the context you gave most people would hesitate emailing support@ for security issues.