Meanwhile, several companies are no longer offering bounties. It's becoming tedious to sift through all the AI-generated submissions, many of which are false positives.
But smaller and cheaper models which produce more junk are cheaper.
The cost is with the project maintainer, not with the bounty hunter.
The number of problems this creates absolutely isn't worth it.
You've traded higher barrier of entry for a PR nightmare when someone publicly complains that you ate their legit submission fee as a money grabber.