That would create a perverse incentive to inflate the severity levels even more than they already are

CVE severity is a terrible way to do this. If you follow the cybersecurity space you should know why.