Because after ICO Tokens Can be buy anyone without submitting any KYC
Totally confusing this process

Some ICO are required to comply with KYC policy, depending on the rules of the SEC of the country where they are doing this crowd funding, if the government does not have any rules or law about it yet, then any ICOs that will start on that country can do a crowd funding without complying with KYC. Personally I don't like the idea of this, giving your personal information to those developers of the project, you'll never know but there's a chance that those information will get leaked and putting yourself on risk. I mean, this is good for ICOs because they will get an approval to make a crowd sale by doing this but for all investors this will just add to the risks, so for me it is very unnecessary.