...what else can you do?

I guess either that or closing the bug bounty program, but I still believe closing it is worse than automated triage, even though both suck.