Is your feature request related to a problem? Please describe.

Users are contacting the Python Security Response Team in regular intervals to ask us if and how they are getting paid for bug bounties. The number of inquiries is increasing. In the last week we had two mails just about cash rewards.

Describe the solution you'd like

Please add a paragraph with heading to https://www.python.org/dev/security/ that explains that PSF does neither run a bug bounty program nor does the PSF pay cash for security bugs. In the past I have replied to inquiries like this:

the Python Software Foundation doesn't run any bug bounty program. We are a nonprofit organization that depends on donation and support from the community.

Describe alternatives you've considered
n/a

Additional context
n/a