What's interesting here is that the VLC team (partially) implemented what Alex Ionescu called for in the conclusion of his SSTIC 2019 keynote "Pay for the fix,

What's interesting here is that the VLC team (partially) implemented what Alex Ionescu called for in the conclusion of his SSTIC 2019 keynote "Pay for the fix, not for the bug": https://www.sstic.org/2019/presentation/keynote_2019/ https://www.sstic.org/2019/presentation/keynote_2019/ They did pay for the bugs, but with "large extra-bonuses for fixes". Maybe this will pave the road to a different approach.