Another interpretation of the Google bug bounty is that fixing bugs of a certain kind is actually worth $100,000 to them (but you're right that it would be hard to sustain if they expected to make thousands of payouts at that level).