Should open source community reviews be considered equivalent to a paid smart contract audit?

Can continuous public peer review and generous bug bounties ($1M+ Immunefi programs) outperform a traditional one off review engagement? whitehat hackers actively hunting for live bounties have a massive incentive to find bugs that a two week engagement missed. Do you value a massive bug bounty program more than a static code review certificate?