Maybe you don't know how this works. Most (almost all) employees do not have access to these bugs, either. But community members can and do have access.

Early access to these reports can be worth literally millions of dollars in the wrong hands, and cause much more damage to our users. However, who gets access isn't decided by who gets a paycheck. It's decided by who is involved and participating and trustworthy. That can be literally anybody.