I think anonymous has "hacker-criminals" confused with "people who are smart". Not all people (in fact, a very small, small, small subset of) people smart enough to find errors in software are "hacker-criminals". Is Bill Gates a hacker criminal? By your definition he must be. Well, he *is* a actually a criminal, but I don't think driving illegaly counts as "hacker-criminal".

Firefox could put up the same kind of reward as well, but I think it's much smarter to offer $500 to any decent person that wants to turn in security bugs before someone pinches your credit card numbers than offer $5,000,000 after someone has stolen billions. What do you think?