Why would you vindictively ban someone who has already proven they’re capable of independently discovering half a dozen zero days in your software? That’s just a recipe for disaster, creating an enemy who will set about using those skills to actively cost you tens of millions, they’ve already saved you that much with the 6 they discovered and reported properly.