[underdeserver]

Yep, you should really give up significant income from companies that do responsible vulnerability disclosure in the name of a random HN's commenter's values.

[sneak]

At no point did I say you should give up income.

[underdeserver]

"Always just publish your research."

In most bug bounty programs I've seen (including Apple's and Facebook's) payouts are contingent on not publishing the research without consent.