I guess bounties are not really possible for security token offerings, right? First of all, every bounty participant would probably need to do KYC but then it's like you are giving away 'company shares' for free. Understandable that this is not possible when having to comply to all sorts of regulations, Even though I'd really love to have a bounty program.
Depends of the security tokens, but i think they rather would pay those via eth or something to avoid the dump, as tokens would be real shares.
Sure, a payment in ETH or BTC would be also a different soiution. Depending how their sales are going, who knows, maybe they are considering the legal possibility of hosting a bounty program. Would definitely be very interesting.