The part that's contraversial about the MS bounties is that they stopped covering the majority of on-premise products. For example, person that reported the tw

The part that's contraversial about the MS bounties is that they stopped covering the majority of on-premise products. For example, person that reported the two major Microsoft Exchange vulnerability chains received no payout at all. Ref: https://i.blackhat.com/USA21/Wednesday-Handouts/us-21-ProxyLogon-Is-Just-The-Tip-Of-The-Iceberg-A-New-Attack-Surface-On-Microsoft-Exchange-Server.pdf https://i.blackhat.com/USA21/Wednesday-Handouts/us-21-ProxyL...