Not obvious where to file issues: this can easily be solved by advertising the CMFPlone issue tracker on plone.org and on the github.com/plone site by adding a organisation description with the link to the tracker.
Allowing anonymous submissions of issues: this was once discussed in another thread. There was an idea of creating a form for anonymous users which submits to CMFPlone/issues via a plone-org github account.
There is not much reaction here.
I am also confused about where to report bugs. Was there never a consensus on a ML or something that can be linked?
My last info was not to use github issues but apparently that has been changed a while ago.
"If you think your bug involves a core component of Plone, check to see if that product/package has its own repository at https://github.com/plone. If it does, use the associated issue tracker to submit your report. If it does not:
Check the legacy issue tracker for recent activity and, if it appears to still be in active use for that product, submit your report there.
In the likely event that there is no recent activity on the legacy tracker, submit your issue via the catch-all CMFPlone tracker on GitHub."