That framing is not just branding though. The partners are specifically tasked with patching what is found, and the 135-day disclosure requirement means findings cannot just be buried. The incentive structure is pointed in the right direction even if it is imperfect.
