A lot of people think its not enough money. In this case it appears to be about 30K USD. Here's an issue with paying more: the security engineers employes are

A lot of people think its not enough money. In this case it appears to be about 30K USD. Here's an issue with paying more: the security engineers employes are paid around 100 to 150K a year. Imagine you'd get paid 100K for a big exploit. It wont be valuable to be a security engineer anymore (since you can't be paid additionally for finding the bugs), it's better to be unemployed and spend your time finding the bugs. I think that's one of the main issue, at least until bugs are extremely, extremely rare (which really, they aren't - these news are really the tip of the iceberg).