All Apple have done here is ensure that if an account take over or information disclosure vulnerability is found in the future, nobody will trust they will get

All Apple have done here is ensure that if an account take over or information disclosure vulnerability is found in the future, nobody will trust they will get paid the expected bug bounty. Congrats, Apple. You just helped increase the chance that researchers sell very bad exploits to state-sanctioned attackers, and you won’t ever know about it.