Bug Bounty Platform Emphasizes Need for Firms to Have Vulnerability Disclosure Policy