Comment Microsoft has always dealt with bugs as a PR issue (Score 1) 100
Since Microsoft has a habit of ignoring the issues that get reported without a bounty, I don't see how adding one would improve the issue.
One of the reasons for Full Disclosure is to pressure companies that think of security vulnerabilities as a PR problem instead of an urgent technical issue. If the first reaction you get from a company is "this only effects a small handful of users" then they are trying to patch through spin instead of fixing the problem. Microsoft is not the only one that does this, but they have been one of the biggest offenders.
BTW, "this only effects a small handful of users" has been used by Microsoft so many times that they have grounds to trademark the phrase.