Its cheaper to pay bug bounties than to hire a security expert or legal costs