Why would they pay anything? The researchers offered them the vuln analysis for free, unprompted.

If anything, they got paid in exposure.

Let's hope the grants keep coming in because those researchers will start getting offers from the darker corners of the web if bounties aren't paid.