Comment by neilv

> Their last paragraph shows that they didn't understand

I think I understood. The last paragraph of mine that you cite was speaking of the creator of the bugs, not the discoverer.

The liable party should be investing reasonably towards non-negligence. (Especially in the context of spending billions of dollars each year on oft-misaligned headcount that's creating many of these liabilities.)

I'm not talking about the company optimizing for the minimal amount they think they can get away with paying to try to cover their butt. Nor am I talking about how white/gray-hat researchers adapt viable small businesses to that reality.