depends, kyc is really giving away bits of ur personal info. if the project doesn't seem that legit in the first place + ur airdrop + bounty amt is not significant, might not be advisable to do so.