Good security practices are something that have to be woven into many departments: design, development, testing, etc. Most of the researchers who report these k

Good security practices are something that have to be woven into many departments: design, development, testing, etc. Most of the researchers who report these kinds of bugs are more like hunters than zoo keepers. They wan't to go where there's fresh game, and they specialise in shooting holes in shit. If you put them in a zoo, their skills are going to be wasted. Besides, I suspect working as freelance l33t hacker is more profitable and gets you laid at parties.