I don't agree that bounty distribution should be done through kyc. As far as I'm concern, one's data is note safe once it is out. Some of this companies even sell this data. I try as much as possible to do my due diligence about a project before joining but if at the end of the day, it turns out that kyc is required, if I can, I just walk away.