I believe that even during the bounty or airdrop, the procedure for the KYC is absolutely correct. You are paid money and therefore you must provide your data as on any work, this is the right of the developers of the project. I do not see any risks here!