So "we pay people to find security bugs" is the playbook now? Whatever happened to "with enough eyeballs, all bugs are shallow?"