Given how low quality most reports are for bug bounties, putting social engineering in scope publically would be dreadful for any employees. basically just authorized mass spam. social engineering in a private pentest though, sure.