Yes it is severe, but someone(s) at that company already know that, and anyone who doesn't likely doesn't care.
I would expect larger organization with real bug bounty programs to pay more, if only because they have shown they care. That other company, they do not care.
> Want to match two random people? Just swipe right for both of them.
... this could be cool! I kinda think some dating app should add a rate-limited (and probably paid-for) Matchmaking Mode. What could go wrong?