That's right. That's actually a good thing to do.
But most of the time, the bounty manager determines which account is the real owner in order of priority, so I'm not worried about that.
But there are times when the thief of the account is the first one who register in the campaign. I experience it myself when I check the spreadsheet first especially in social media or telegram campaign that there is already someone who registered using my account. Due to hundreds or thousands of participants, they are taking a chance that the manager wouldn't be able to check that they are just thief of the account. Maybe it is a newbie because most of the time, they are not allowed yet to join a campaign so the most likely solution to this would be a proof of authentication post so that those cheaters wouldn't be able to get away with it.
Yes newbies are not allowed to join in signature campaign but i really don't think that is a newbie because first of all it's a beginner they not have enough knowledge about crypto currency or in forum. Maybe a few newbie and most of them are old in crypto like sr. to legendary member that an expert in crypto.