For now, security researchers who have been invited by Apple to submit high-value bugs through the program prefer to keep the bugs for themselves.