This is more in response to my original post, but okay interesting point. (When I said "invested" here I meant invested in finding security flaws.)