So he should have sold this? He’s always seemed like a good person to me who would do that. Sit on it knowing others may find it and users are at risk? Who ca

So he should have sold this? He’s always seemed like a good person to me who would do that. Sit on it knowing others may find it and users are at risk? Who cares he got paid. That’s not why he did it, he found it while developing one of his apps and reported it. Good for him. It’s nice Apple paid him. I can understand thinking it should have been more. But what ethical alternative is there to reporting it?