I completely agree. It's not like Facebook didn't pay just because they didn't feel like it. They couldn't pay without rewarding a blatant violation of their To

I completely agree. It's not like Facebook didn't pay just because they didn't feel like it. They couldn't pay without rewarding a blatant violation of their ToS. If they paid once, then they would have to start paying any researcher who abused the vulnerability before reporting it.