Pete is right on. Yes, they can cancel your reservation if it is found that you have been in the last 4 years. If you are booking in the same exchange system (RCI or II for example) then the system should catch the issue up front. However, if you book RCI one year and II another year, then you run a risk of being cancelled once discovered by the resort.
No, Bonnet Creek does not have a "1 in" rule. Vistana has only recently reinstated this rule; it has not been in effect for quite some time, but I understand they have had it in the past. And
@Familytradition they tend to do this to curtail the folks like you who go every year in a row - primarily a sales tactic. Another chain that regularly enforces a "1 in x rule is Vidanta (Grand Mayan, Grand Luxxe resorts in Mexico.) Manhattan Club in New York is another Vistana property with the rule. It is also regularly enforced at resorts in the North East like Smuggler's Notch or Lake Placid Club. Some of these are favorites of ours, so we watch the dates carefully.
Note that Disney also plays forms of this game; they used to ban trading in from owners of other Orlando resorts, so up until the rule was loosened a couple of years ago I was barred from ever booking DVC because of my Vistana Resort ownership.
Being a glass half-full kind of person, I see this as a bonus as it keeps us trying new resorts in some of our favorite destinations. Orlando has some really nice resorts. If you are blocked out of Vistana Resort, I might suggest trading into Vistana Villages, or one of the Marriott Palms resorts, or any of the Hilton Grand Vacation Club locations. They are all top tier resorts with great amenities. Vistana's loss may be their gain. Of course Bonnet Creek is another option; I have never stayed there but have stayed at several other Wyndham resorts and generally place them a notch below the top tier.
One final thought. Vistana Resort actually has two resort numbers in both II and RCI. I have been able to take advantage of this and "double up" at Smuggler's Notch because they also have two resort ID's for different parts of the resort. I was prepared to argue that I had no idea they were the same resort if questioned, but actually had no problem checking in the second time at Smugg's. Maybe a bit of a risk, and I can't guarantee it would work, but anyone determined enough could try this tactic as well.