The first part of your comment specifically mentions bounty rewards for bugs, so I don't see what the problem is. The rest may be tangentially related, but it's

The first part of your comment specifically mentions bounty rewards for bugs, so I don't see what the problem is. The rest may be tangentially related, but it's still interesting. I have to wonder if refusing to award bounties is a symptom of intentional maliciousness or if it is instead some degree of bureaucratic ineptitude. The adage "Never attribute to malice that which can best be explained by stupidity" comes to mind, but I think "stupidity" would best be explained away as the lumbering beast with little coordination among its myriad appendages that is most enterprises. Your experiences suggest to me that it's also possible a matter of embarrassment. It's a shame really. Improving user experience through safety ought to be a matter of importance but it often isn't...