Another way to look at it is that if there are no bounties, then the company may not have security issues high on its priorities list. I'm not saying it's true

Another way to look at it is that if there are no bounties, then the company may not have security issues high on its priorities list. I'm not saying it's true, but it's plausible that some people in Egor's position think that way. And he seems to like his publicity, so 1+1 = 2.