Bounty is always a very big risk. Because even bounty managers can simply not pay and come up with some strange things for this. Here, perhaps, only the luck and honesty of the project itself is important.
No one forces you to take those risks, you will participate in it or not is up to you to decide.
In this space, everything happens every day, legal or fraudulent, and if you can't judge everything for yourself, don't blame it. The issue of the deposit bonus is only considered as one of the priorities to evaluate a bounty campaign.