That's how those bug finders fees work, I'm not sure if introducing money into something ever makes it more ethical though