An actively exploited sandbox remote code execution vulnerability affecting all Chromium versions has sparked debate after Google paid the ethical researcher a mere $1,000 bug bounty. Commentators argue this payout is drastically undervalued compared to black market rates and the immense internal costs Google saves by relying on external white-hat hackers. The discussion underscores broader frustrations regarding inadequate financial incentives for security researchers compared to the lucrative profits of state-sponsored cybercriminals.