I don't think $25k is a large payment in githubs eyes. There are much smaller companies that doesn't even blink spending ten times as much.

And this was definitely approved before they went out and told people what they would pay for different bugs.