[tinus_hn]

Why would companies pay a bug bounty and then expect nothing in return?

[mannykannot]

You have, indeed, discovered the reason why companies pay bribes.

In the case of bug bounties, one self-interested reason for them is to provide an alternative to the black market in vulnerabilities.