Bounty scale surprises me a lot.
I always thought that the main incentive of any bug bounty program is to make it more attractive for any severe 0-day to not get onto black market and instead be compensated fairly by the company.
Isn't $3,000 per Critical just a tiny bit too low for a service that proxies half the Internet?