Apple capped bug bounty submissions after a flood of AI-generated fake reports. Security experts now say the changes make sense.