Is the current state of bug bounty programs sustainable for either researchers or companies?

Payouts haven't kept pace with inflation while programs proliferate and competition intensifies, yet companies still struggle with triage quality and response times. Some researchers are pivoting entirely to pentesting contracts or product security roles—do bounties need fundamental restructuring, or is this just market correction after years of hype?