Agreed. I don't think people appreciate that running a bounty program is not an easy task. The vast majority of the reports you get are invalid, and you have to

Agreed. I don't think people appreciate that running a bounty program is not an easy task. The vast majority of the reports you get are invalid, and you have to actively search for the signal in the noise. Mistakes happen, but the correct response is for the reporter to provide more information and a better demonstration. Breaking the rules of the program, however, should never be inbounds and I certainly don't think it should be rewarded.