Typically the people who find these sorts of bugs have jobs penetration testing and auditing applications. Some of those applications are important to people's

Typically the people who find these sorts of bugs have jobs penetration testing and auditing applications. Some of those applications are important to people's lives and wellbeing. And if you don't work for the NSA or similar, you're actively helping the application owners to find and remediate those bugs, which improves security for the creators and the users. For example, if you're an application security analyst at Google and you find a security flaw that could result in users' personal information being leaked, aren't you making the world a better place by finding and repairing that bug?