Yes bounty managers do not determine legitimacy of a crypto project but they can do well to mqke adequate research about the project they want to handle bounty for to ensure that its not outright scam. Some bounty hunters just go ahead to collect bounties without any form of research,  but the experienced bounty managers try their best to research about the project before accepting which i think its the best thing to do