On the other, well, every little thing has to be thought through and secured these days doesn't it? Can't have a nice little rewards program without some asshole taking advantage of any perceived flaw in your armour...
The challenge, especially for places that aren't really tech-first types, kinda becomes stale (for me) since they inevitably have a flaw somewhere. It's really just me pitting my free time against their threat model [2].
And yeah, ultimately, this is one reason why we can't have nice things.
[0]: I'm not saying publicly releasing flaws is always a bad thing. There's a subtle etiquette (an art-form, even) to using publicity to pressure change.
[1]: There are different levels of publicizing. e.g. sharing (complete) code, social media post about said code, etc.
[2]: This is also not meant as an insult to the OP.