Some of the sites that are collecting KYC documents seems very inefficiently built and the information might get hacked very easily. I cannot understand if they are providing free coins, is it really necessary to complete KYC for that? There is no real investment involved in that case.