Discovery used to be the bottleneck for open source bugs, but with automated discovery, remediation's the bottleneck, which bounties don't fund.
AI-Led Remediation Crisis Prompts HackerOne to Pause Bug Bounties
Summary + source link. No paywalls, no tracking.