[tlholaday]

Arguably, bug bounties are always paid for by users. A vendor might write the bounty-winner’s check, but the source of the vendor’s funds is the vendor’s customers.

[BobbyJo]

'The users' vs 'A user'. The difference between everyone recognizing a 0.05% loss, and 20 people jumping off buildings every year.