People who pay bounties for vulnerabilities don’t really care how you find them.