So? You sell your exploits to another dev at a fraction of the bounty, other devs so the same for you. It’s not like that puts up any real obstacle.

Probably not.

However, such a limitation is rather easy to workaround. Which means now, buggy commits are going to look suspicous.