[betaby]

> If Google can find it, so can others.

Not really. It requires time, ergo money.

[chii]

which bad actors would have more of, as they'd have a financial incentive to make use of the found vulnerabilities. White hats don't get anything in return (financially) - it's essentially charity work.