Mandatory bug-bounties from major vendors

Except that doesn’t happen, gjbloom, and people watch for it. My company doesn’t pay bounties to employees or normal code contributors.