There are two unrelated issues: 1) Pentest 2) No bonuses

Yes, the pentest surfaced security issues. It also underscored that GoDaddy isn't giving bonuses.

I think it was great security, but tonedeaf.