Why shouldn't they be rewarded for their hard work? A researcher doesn't have to disclose a vuln if he doesn't want to. He can sell it to the company, publish

Why shouldn't they be rewarded for their hard work? A researcher doesn't have to disclose a vuln if he doesn't want to. He can sell it to the company, publish it for free, or just keep it for himself.