> Ethical disclosure is a complicated topic, because researchers shouldn't hold bugs for ransom or demand high payment.

I mean, why not?