Huh? Apple has a robust bug bounty program.

https://security.apple.com/bounty/