This was an extremely serious privacy issue, and it's shocking that they'd only award $1,337 for a bug of this scope.