The most likely explanation for requesting a video is to weed out low quality AI-generated “vulnerability” submissions that hallucinate code that doesn’t compile or APIs that don’t exist. In that context a 1 minute video showing that the report is viable is not much to ask for.