There is a risk for sending your data anyway for any reason. It makes sense for large transactions were you are sending fiat in exchange for tokens. There are anti-money laundering laws that go along with this. For bounty programs and especially airdrops, it is crazy to be that people would send their personal documents to projects that could potentially misuse your information. Stay safe out there, folks.