It's not a small amount relative to bounties from other big sites. These bounties are not representative of what companies like Facebook and Google spend on software security; they're thanking people who would be doing this kind of inspection anyways.
It's also not the case that this vulnerability == celebrity photos.
It's also not the case that this vulnerability == celebrity photos.