> I could easily see some less than ethical researchers applying for this program and selling all the 0 days they find to the usual suspects rather than inform

> I could easily see some less than ethical researchers applying for this program and selling all the 0 days they find to the usual suspects rather than informing Apple. That's what has been happening so far. Here's a report from a couple of years ago about this: https://www.vice.com/en_us/article/gybppx/iphone-bugs-are-too-valuable-to-report-to-apple https://www.vice.com/en_us/article/gybppx/iphone-bugs-are-to... The announcement today is actually raising the rewards 5x (from $200K to $1M) to make it more valuable to report this to Apple.