This is actually my revised rule for issues coming from companies and systematised/sponsored efforts: if you get paid for doing security analysis, you are also on the hook for a fix. Shitting the bed and then leaving it to an unpaid maid is how sociopaths behave.