Exactly. Bug bounty seems like one of the smartest financial decisions a company can make. As for devs, it seems like a good deal if they're going to be finding these vulnerabilities anyway