Re: It's not just about the money
But effectively "discovering and reporting critical security flaws that could allow foreign spies to steal sensitive US government data or launch cyberattacks via the Department of Defense's IT systems" can get you arrested ...