Completely agree, the reward is a counter balance to the real-world risks. It's not some idealistic regulatory system that bets on a finite group of agents to catch malicious actors in a rapidly changing systems with millions of events each day.

Nor does it create massive inefficiencies in the system by forcing every company/employee/transaction to jump through arbitrary hoops in order to verify they are legit, designed to catch yesterdays criminals.

Instead of paranoid dragnets it promotes enforcement on a case-by-case basis, sourced closer to problem and by the people who actually understand the problem.