That was my assumption, but my netsec knowledge could be written on a stamp, so who knows! ;-) I imagine some people think being rewarded for finding vulnerabi

That was my assumption, but my netsec knowledge could be written on a stamp, so who knows! ;-) I imagine some people think being rewarded for finding vulnerabilities is unethical entirely, but there seems to be a huge dose of pragmatism around the space.