There have been many documented cases where tech giants have outright refused to pay out, employing practices like: changing the rules of engagement post-factum, silently banning security researchers from active bounties, escalating good-faith disclosures to law enforcement, extreme pettiness from managers, etc.
> The sums involved are not meaningful to the company
Which makes it the more bewildering to see how mishappen the handling is