Reporting security issues via E-mail would be E2E and private.
It'd be beneficial for security to have PGP for Kagi so security issues could be E2E when being reported to you.
Having Kagi's PGP public keys... public would make sending encrypted messages to Kagi and Kagi only possible.
https://en.wikipedia.org/wiki/Pretty_Good_Privacy