They’ve essentially required that they approve people before they can take on bounties, so they also have the chance to deny bounties arbitrarily (before any wo

They’ve essentially required that they approve people before they can take on bounties, so they also have the chance to deny bounties arbitrarily (before any work is done). Unlike the usual scheme of bounties posted and randomly fulfilled (bounded total payout, but no control on time), or security bounties where people randomly show up (unbounded total payout and time) So they have the opportunity to control how much bounty is actually “out there” at any given moment, beyond simply a posting the list of bounties in existence. If it’s too many bounties closing at the same time, or more total payout than they’re willing to accept, they’ve given themselves enough control to manage it. Of course, this requires them to manage it effectively but it’s not fundamentally a bad idea