If I go out and hire (say) tptacek (and the rest of Matasano) to perform a software security audit, aren't they're doing it to earn dollars? When a corporate board hires external financial auditor to look over their records, same thing. I don't see where your inference of altruism comes in.