Comment by philosopher1234

I like this idea.

1. Company verifies the bug

2. Assigns it a price according to impact

3. Keeps details hidden until Apple pays them, then reveals the bug. Thus Apple is forced to pay, but bad actors dont get access.

Different bug markets can compete to correctly price bugs.