Its pretty much a necessity if you ask me since if there is no bug bounty system in place (or if it is not sufficient) the users who find issues would most likely exploit them, causing you or the players far greater losses.