Regarding doing KYC before letting people invest, there are pros/cons to either option but I don't think they are breaking any current or future laws here, but I am not a legal expert so I'm only voicing an opinion. Remember that all funds invested are in limbo until KYC is complete. UTRUST is not allowed to touch it.
Technically, who is there to tell them what to do with the funds, to touch them or not? Do you read anything specific and binding in this regard in the whitepaper?
Remember - ICOs are unregulated.
Either way, there is a big difference between doing KYC before or after accepting someone's money. If you broker a financial transaction, which you do when you set up an address for receiving BTC or ETH, and if you want to be on the same level of compliance as a financial intermediary, then you better know who you are dealing with beforehand.