The ROI on this is massive if the bounties would actually be accepted (they won’t, right?)

It begs the interesting question on the future of bug bounty programs: when it’s so easy to find and solve issues there’s less incentive to offer a bounty, which in turn leads to less incentive for humans/agents to find and fix security issues..?

As someone not plugged in on the current times with respect to bug bounty programs, curious for peoples take on this / is this already the reality ?