Yeah, but it seemed that they were low because both Google and Microsoft value the security of customer data over their own finances, and thus don't care as much about exploits that drain their wallets. Resulting in a lower bounty.