I agree that deniability from a technical perspective (such as absence of a direct link from the account on one platform to the account on the other platform and vice versa) doesn’t necessarily make it much harder to identify that it’s the same person. On the other hand, even if the username, profile picture, etc. are exactly the same, one needs to be careful about associating the accounts too quickly, especially in the case of some common/simple username—it could just be a coincidence.
It seems that things like behavior and writing style are more important to keep similar or distinct—it would take a little while longer to pick them up for an outside observer, but they seem to be much more reliable signals for linking accounts; even if the user in question denies that both accounts belong to them, I think it’s more likely that the observer just wouldn’t believe them if they know the user’s writing style.
This is a good question, I don’t really have a specific threat model in mind. Obviously, I want “the bad guys” to know as little about me as possible, but I can’t seem to easily define who they are and how I would identify someone as belonging to them before I had a chance to talk with that someone or at least observe their behavior for a while. Regarding the quiz idea in my question, them having similar interests (or knowing mine) doesn’t guarantee that they aren’t part of “the bad guys” either.