And simply paid they guy out of appreciation.

I generally support the model we've had for bBug disclosure - it's about preventing zero days - which protects the users of these products.

But for AMD stuff now, go ahead and sell your discoveries, let the zero-days ruin AMDs marketing.