Beyond Quick Cash: Rethinking Bug Bounties for Greater Impact