[TimTheTinker]

Not if the bounty is high enough and payable to an anonymous recipient (perhaps vis cryptocurrency).

[vulcan01]

I don't think state-affiliated hackers really care about money.

[TimTheTinker]

Good point, though I imagine a large bounty payable to an anonymous bitcoin address could encourage individuals within such an organization to divulge vuln info.