Yeah, my thoughts exactly. Do Intel's quoted guidelines mean exploits that expose credentials aren't eligible for a payout? Those are some of the most dangerous!