Probably. How do you monetize this though? You can't easily do it the black-hat way (not every vuln is worth something and you gotta have channels for distribution).

On the other hand we got bug bounties which are never paid using bullshit excuses and so you can't monetize it using white-hat ways too.

The correct solution seems to be to research distribution channels for black hat ways? Doesn't sound constructive.