[mannykannot]

You have, indeed, discovered the reason why companies pay bribes.

In the case of bug bounties, one self-interested reason for them is to provide an alternative to the black market in vulnerabilities.