I'm just hoping this person doesn't use the same token address and/or telegram address and register for a signature campaign and start posting bullshit. I don't want my account linked to some bounty cheater's account. I wonder why they picked little old me? I wonder if I should actually be flattered.

They won't. Fraudsters just want to take advantage of the forum rank.
And they picked randomly. It happened to me lots of times
Twitter campaign, Facebook campaign, signature campaign, airdrops etc..
That's why authentication post as a proof is a must. And of course, a responsible bounty manager.