Comment by nwellnhof

> there is essentially zero upside to screwing over bounty hunters.

Well, I felt pretty screwed over after Google decided not to reward me for discovering CVE-2021-30560.