hot take: being a whitehat means that you should be willing to disclose bugs regardless of whether you will be rewarded sure, disclosure deserves a reward, but your priority should be doing the right thing rather than getting paid besides, i think this approach will always be rewarded in some way eventually