While I support companies having bug bounty programs, I also can’t justify why a company must be obligated to provide a bug bounty program. It’s like obligatin

While I support companies having bug bounty programs, I also can’t justify why a company must be obligated to provide a bug bounty program. It’s like obligating companies to have a user feedback program.