That seems to be fairly standard. When some government institution started a term-limited security-related program for a project to which I contribute, the consulting company that ran the program took out a fixed fee out of the pool each month, too. I suspect this is done so that the project is encouraged to promote the program while it lasts.

Actually, I found the terminology much more problematic than the way the program administrator was compensated: while “bounty” can mean (among other things) “subsidy”, that is not the meaning that is predominant in popular culture today. Maybe some use it as a convenient industry shorthand, but others are definitely aware of the fraught history (particularly when it comes to persecution of Native Americans), and allude to it in conversations. And that a 21st century government sees this as a model to be emulated for maintaining public safety is quite disturbing.