My end-of-the-year review about Google's Vulnerability Reward Program