I feel like it would be cheaper to pay a few bounties you dont really agree with than to risk a bad rep with security researchers.il Its still a relatively small community.

Besides, if you don't pay the competition will, and ther use cases for your vulns are unlikely to be good for your business.