[oelmekki]

Do people using these oldish softwares update them, though?

Funding bug bounty programs kind of fail its objectives if they don't.

[scrollaway]

You're not wrong, but those are still separate issues. In the context of benefit for the government itself, you'd certainly hope so…

Regardless of whether they get updated, these are still a net benefit for new installs.

[oelmekki]

Oh indeed, I'm not trying to say they should not fund these programs, this is awesome and welcome. I'm just warning about a possible pitfall for them to keep an eye on :)