Comment by michaelt

  The author is completely dismissing [0] the
  entire product 

If he's looking for bug bounties (be it for cash, kudos, principles, or to see it fixed), and he finds a security bug and doesn't get a bounty, why would he keep looking?

Fool me once, shame on you; fool me twice...