They should pay the guy, not because it's the "right" thing to do, but because it maximises future bug reporting. If people see that facebook back out of payin

They should pay the guy, not because it's the "right" thing to do, but because it maximises future bug reporting. If people see that facebook back out of paying for legitimate, reported bugs, they'll seek other options to monetize them.