It's way more than a dollar. How many locks could one technician replace/fix in an hour, and what's their hourly rate?
"Me of all people"? Am I a spokesperson for "Responsible disclosure" now?
I would have notified the vendor ASAP, and I might not have put the vendor name into the talk at all. But that's me, and I am super conservative about this stuff. Lots of very reputable security people would do exactly what Cody did.
(edit) That's not even considering that this cost can be carried by the hotels. I'm sure they can cough up $500 to secure their facilities.
--
Please don't tell me that you, of all people on HN, think that there's no need for a private disclosure on this guy's part?