If one of the smartest computer security guys was prepared to do all this work and throw lots of expensive experts (well grad students) at finding your bugs - would you: 1, Send developers to all their seminars to learn something 2, Buy them drinks 3, Sue them
1 and 2 are not mutually exclusive. Exactly why is the seminar not at the local pub?