The problem I have with KYC in ICO is that a lot of these projects are scams. Lets use the recent Hashcard ICO scam for a example.
They ran away with over $4mill which isn't good, but on top of that they have all the investors KYC information.
So what protection does the investor have against their personal information being used by a scamming ICO?
Until there's a regulating authority for ICOs ,then KYC should not be required for the safety of personal data to the investors.