I'd hope that some people, at least, actually want to fix problems and gain respect in their field. As opposed to engaging in criminal activity and selling out to the highest bidder.
It's easy to say "I do it for the respect, not the money" when you have enough money to get by.
There's plenty of guys out there who are searching for hacks like this because they need to feed their kids. I won't criticize them for selling bugs to nefarious entities.
Bug bounties aren't for guys like us who don't need the money.
People who want to gain professional respect are probably going to stay away from a pornhub bounty - I am not anti-porn, but I wouldn't put it on my resume either.
Also, regardless of good intentions at the start, once the company has screwed you over. I am sure it is tempting to return the favor with the next vulnerability you find.
