ever notice how apple and google reports who received zero day bounties for what cve but not microsoft unless it's literally reported outside of microsoft?