Oh I completely agree, that's why I said "can also be like blackmail". Key word "like" because it does differ in the exact way you describe.

So in this threads context, "hey I found a vulnerability in your infrastructure, you could pay me for it" does not actually constitute blackmail unless they actually follow it with "I'm selling to the highest bidder which may not be you".