Agreed. I think they offered the bounty with that expectation. A quote form their blog: "[...] security bounties can be a very effective way to show the presen

Agreed. I think they offered the bounty with that expectation. A quote form their blog: "[...] security bounties can be a very effective way to show the presence of vulnerabilities, but they are hopelessly inadequate for showing their absence."