@adulau
It started in the proprietary world: if you find a bug there, the company that sells the right to use the software makes exploitation money from that, so it makes some sense there to hand some of that money out to people who help you exploit more.

Somehow that then got pulled over to open source software...🤷