A bug bounty should motivate exploitable bugs to be reported so that they can be fixed. IMO, if it refuses to accept certain kinds of bugs that can still be exploited, it's not working properly.

A bug bounty directs internal engineering efforts. It can't eradicate bugs; that's not how bugs work.