Imagine how many thousands of exploits Apple has found and fixed internally, that weren’t found by outside researchers. Bug bounty programs aren’t a replacemen

Imagine how many thousands of exploits Apple has found and fixed internally, that weren’t found by outside researchers. Bug bounty programs aren’t a replacement for internal security, and they have the potential to be very expensive compared to paying someone a salary. Is it an enormous compromise of trust? Dunno. With an average fix time of a single business day, I’m inclined towards “no”: that’s an awfully rapid response for incompetence to deliver.