Every RCE that could have been sold on the black market for a million dollars is worth almost the same reward (modulo the advantage of being legal).

Think about this guy being a Russian hacker and selling the ability to access restricted accounts, pose as Instagram administrator and I assume access user's data freely