Even if the nominal value of the reward were as low as $100, it also has another positive but unstated value: it's a strong signal that you won't be prosecuted for revealing to them a flaw you've found.