What if people start asking questions where you got the million dollars from? I've never understood how those presumably illegal markets can function with such large sums involved.
You'll think of something. If you can hack one system, you can hack another.
$250k fully legally and with recognition is probably a good incentive not to bother. White hats have their privileges.