Exactly, if this doesn't meet the threshold for their bug bounty program, why would anyone submit the bugs? At this point, the bug bounty programs are to encour

Exactly, if this doesn't meet the threshold for their bug bounty program, why would anyone submit the bugs? At this point, the bug bounty programs are to encourage fair disclosure to the vendor with an economic reward to deter the other options. I Imagine the researcher could have sold that off to someone for a nice chunk of change.