Covid: White hat bounty hackers become millionaires

At the end of the article a researcher (who thinks the restrictions on where to look for bugs are inappropriate) says these are good training grounds for students / beginners.

Would anyone like to comment if this is their experience? Do people think the white hat courses are better places to start

(old coder here, but aware that breaking things is as good away to learn as any)