A majority of people have a sense of morality. Whether or not the incentive would "work" in converting a hacker is unknown, but it certainly works with companies like google. They offer $1337 for security vuln reporting which is a pittance compared to the gain of selling exploits on the black market, but they pay out in the majority of breaches: it usually isn't found in the wild.