It's one thing when someone from the forum does it to see if there are alt accounts or rule breakers, it's a totally different thing when a government agency or chain analysis company has free access to do as they please.
To operate or to be a part of a campaign there has to be a publicly known address that holds funds for "everyone" involved to see it, if someone would want to track anything they would just pull the on-chain data related to the campaign address, it would be a lot more accurate and a lot more reliable, the data on any spreadsheet lacks integrity unlike what's on the blockchain.
Other details like posts paid for per week and whatnot, all can be extracted in the same manner, the only thing that you can't extract directly would be the Bitcointalk user name related to the receiving address, which you could still find if the participants have to post it publicly at some point, which is kind of the only the way to run a campaign or else the campaign owner and the campaign manager would have to do a lot of extra work to ensure a smooth campaign, which isn't worth it IMO.
I don't really understand where the issue is in regards to publicly posting a bitcoin address, the address is really just a representation of what's called a "public" key, it is not meant to be private or anonymous, in fact, it can't be any of that, it's merely just pseudonymous.
If you practice simple basic "privacy precautions" there is nothing that could link a campaign address to your identity, if you give your KYCed exchange address to a campaign it doesn't matter if they put on on a public sheet or hide it in the dark, the minute you get your first payout your identity is linked to that transaction.