This is where I am, currently. There's a lot of talk about the low opportunity-cost here, but I think that relies on the assumption that there also isn't a single opportunistic person out there with access to the RCE. That doesn't strike me as a strongly supported assumption, in my experience.

For all I know, it's a straight up scam. Someone already sent more bitcoin to the address to double the bounty.