I think it's going to be a mandatory part of most bounties in future so we have no choice but comply, just need to do be more cautious and do research about company and everything related to project before joining.
Exactly, projects that are big and strict in implementing their rules and regulations most likely ask for a KYC verification before starting and end of the campaign, you can make a second thought before giving your personal data or personal identification card as long as you know the purpose and benefits
What changes if you know the benefits of the project? Where is the guarantee that your data will not fall into the wrong hands? Even if you know the biography of each project Creator you can not be sure that any employee will not sell your data to third parties. Hackers can also get access to the vault databases. It seems to me that the only way to save your data is not to share it with anyone.