I agree. I meant more in the sense that if the vulnerability is fairly obvious, multiple people will claim the bounty and if you try to simultaneously not pay all these people because their find was not unique, and also say that nobody has claimed the bounty, I can't imagine that going well. People tend to get mad when they don't get paid.