Re: $3500 for having found a risk of that magnitude ?
"... the damage to your reputation would have been orders of magnitude higher."
You must be joking.
Whatever reputation MS has is way beyond the possibility of further damage.
And we all know it's been so for a long time.
So it can be no surprise to anyone to get *this* for letting MS code inside your boxes.