This shouldn't be different than putting private keys in decentralized exchange, if I am not wrong. So either use throwaway address or don't use platform at all.
Just keep this in mind, accusing bountyhunters.io of scam is accusing many projects and startups of being scam, as some of them share the same developers, team members, advisors...
@bountyhunters do you escrow bounty rewards?