Reward is very important but it should not be put first, the first thing that a manager should consider is if the project is legitimate or not, because it's useless to be attracted to a big reward when in the end all our effort will only be wasted as the project goes "SCAM".
It is not the job of manager only but also for the participants to judge the project. If a person is willing to advertise the project they should be careful not the promote a scam project as well. But very few of the bounty participants actually care about this, they will jump into it without doing background checks on the team, their website or whitepaper.
That's not new to the crypto space, so we have to be aware.
Definitely, but few will read this to understand the same.