Very creative and efficient use of $400 on PR/advertising!
I don't think of it as PR/Ad. It's a bounty. If you put in time to find a flaw, you deserve at least that much (and I'll give you more if you help me fix it).
[1] https://mprimi.github.io/portable-secret/examples/bounty.htm...