If the precedent that you want to set is that security researchers can’t ask for additional compensation, just tell people they can’t ask for additional compensation. I think not allowing people to ask for additional compensation is a perfectly fine rule.
As I said directly before your comment, I’m not going to be making the proposal once the details are public because it seems it is not supposed to be allowed.
There’s not really anything more to be said here.