I think that's unfair to say about a company that pays bug bounties at all.
A lot of other companies would have ignored the email for weeks or threatened legal action.
A lot of other companies would have ignored the email for weeks or threatened legal action.