bug bounty programs always get you less money than what you could earn optimising for money... look how much bugs go for on bounty programs vs. selling them to

bug bounty programs always get you less money than what you could earn optimising for money... look how much bugs go for on bounty programs vs. selling them to companies who want the bugs for other purposes. (not talking illegal here, though maybe shady/gray area, kinda like patent trolls?). generally, working at a company as a fulltime dev will also net you more than working on bug bounties. sure there's big bounty payouts, but its really rare for someone to consistently get such payouts. a lot of bugs filed to bounties are also found just working with thinga daily and stumbling upon them rather than specifically looking for them. I know a few old colleagues who worked on drivers for a security tool hit a lot of Microsoft kernel bugs. they got nice paydays and went up the list/hall of fame of prime bug finders not because of the bounty program but merely because their dayjob yielded them results to submit... i think this cloudflare program is in similar vein. people who already know or stumble upon prior art can submit it easily, and get a few bucks for it.... its imho not meant for people to scower all patents searching for it in their free time... though some might do that. (god what a tedious thing to do... "in one embodiment..." all day long :D)