I think a lot of their issues with bug bounties only apply if the project is pretty popular. If it increases the number of developers working on an issue/featur

I think a lot of their issues with bug bounties only apply if the project is pretty popular. If it increases the number of developers working on an issue/feature from 0 to 1, that's a win. Their analysis is why it's bad to go from 1 to many.