My point is that I don't believe any of the dynamics would actually change. White hats would still report issues (they're not necessarily doing it for the money

My point is that I don't believe any of the dynamics would actually change. White hats would still report issues (they're not necessarily doing it for the money) and nefarious types will still trade/sell exploits.