Some of these bounty owners might not even be aware of what the trust system is all about. They should, but they might now. Or even worse, they might not care as long as they can get as many members as possible to advertise for them. I don't trust these project devs at all, but I would trust them even less (were that even possible) if they allow red trusted members to join their bounties. It's bad business practice and the fact that they don't care makes me question how serious they are about their projects.
That's correct and that's why they should be contacted, the things explained and asked if this was intentional or a mistake.
I mean that there should be the benefit of the doubt until proven otherwise.