Another bug-bounty failure mode I hadn't considered before:

A significant chunk of the LG TV hacking community is based in Russia. But, Russian citizens are not eligible to participate in LG's bug bounty program, due to state sanctions. (I assume the situation is similar for many other bug bounty programs)