So, the message they are sending is "if you find an 'out of scope' bug, sell it on the blackmarket because even if it could wreck havoc, we won't pay you for it."

Nice, nice.