Perhaps Keen is being cooperative because it's the right thing to do. Besides, I doubt anyone is getting rich from Tesla's bounty program. As I said earlier upthread Tesla could have convinced them to wait until they reached a certain level of patching before releasing the exploit.It's reason for Tesla, it's not a reason for keen. Keen's only incentive would be if Tesla is paying them to stay quiet, which is highly disappointing because they could much better use that money to improve their product instead of fighting against their own customers.