I think it's going to be a mandatory part of most bounties in future so we have no choice but comply, just need to do be more cautious and do research about company and everything related to project before joining.
Exactly, projects that are big and strict in implementing their rules and regulations most likely ask for a KYC verification before starting and end of the campaign, you can make a second thought before giving your personal data or personal identification card as long as you know the purpose and benefits