Google hackers earned $17 million last year, all while staying within the law, as they identified security weaknesses in exchange for rewards.