He is not designing the UI, he will be implementing it.

The UI and UX will stay bad as it is, just on a modern technology stack.

This would be the simplest solution. Yes, feel free to find and report bugs - but we will fix them at out own pace and availability. The vulnerabilities will be in the open and exploitable until we get to fixing them. If you need it faster, you can contribute money, people or patches.