Security – Rancher Labs

How would Rancher Support troubleshoot issues on systems where any external access is not allowed, for reasons of security and compliance?
How (quickly) does Rancher respond to / resolve industry-reported vulnerabilities?