I think you'd be surprised. People take a lot of pride in their work and in their professionalism. Crypto has many examples of people leaving $100m+ on the table so they can properly fix a vulnerability.