Comment by lazyier

Sounds more like these companies are using bounty programs to get researchers to sign NDAs so that they can control public perception of their products.

Effectively paying people (and heaping ego gratification on top of that) to be silent about found vulnerabilities.