But for people who don't want to cheat the system, they will report it to the casino that many people do cheating.
That will depend on each people what they want to do with that and if they think cheating is a bad thing, they will not follow others instead will play as usual.
It's like a mission impossible if don't have a benefit to it. I often find the casino just says thanks if someone finds a vulnerable system on their gambling site. Even if it is very important, the casino doesn't give him any reward or maybe a free bet or something. I think the casino management should think about this. Apart to find out the vulnerabilities, the bounty bug program and review site are good for getting many customers also. The casino must open to any report and must give the prize if someone finds the vulnerability system.
Generally, casinos or any platforms start a bug bounty program when they first launch their platform so that if users find any vulnerabilities or bugs in the platform, they report them to the management so that they can get a reward and they can improve their platform, and they stop that program after some time when they feel that there aren't any more bugs and vulnerabilities, only a few platforms would have such a program all the time.
So expecting something in return for reporting a bug or a vulnerability on a platform that doesn't have a bug bounty program going on is useless because you are not going to get anything at all unless it is something very serious and it could cause them huge losses, then they might think of giving you a few free spins.