Just a small percentage of the bounty campaigns require KYC but I think the reason that people are so surprised is that these things always start little by little that no one pays them any mind until it grows to a point where nothing can be done about them. If people keep signing up for bounties that require KYC then there will be a point in the future when all of them will require KYC