You have, indeed, discovered the reason why companies pay bribes. In the case of bug bounties, one self-interested reason for them is to provide an alternative

You have, indeed, discovered the reason why companies pay bribes. In the case of bug bounties, one self-interested reason for them is to provide an alternative to the black market in vulnerabilities.