Companies can mark items as duplicates without fixing the underlying bug for an indefinite period of time. So the 3 vulnerabilities I found all got marked as duplicates without any compensation or even acknowledgement of my time writing up the issues. Felt like a complete waste of time.

If you're great, you can probably find novel stuff better than I was able to, but if you're that great you likely already have plenty of employment opportunities.