It's not so much entitlement as that there is a real and active marketplace for security vulnerabilities. If Yahoo isn't going to pay, someone else is going to

It's not so much entitlement as that there is a real and active marketplace for security vulnerabilities. If Yahoo isn't going to pay, someone else is going to pay for vulnerabilities and that would be a lot worse.