Yup, KYC is a pain in the ass. Gladius project just announced that they need it for all bounty participants. Ofcourse scams happen in the crypto world, but you also have to look at the devteam, and the project itself before deciding on if you want to go trough with it.
We can not read what they the developer team want. Mostly the case is announcing at the end of the ico.
This is not really fair to ealry participant who dont want to do kyc but should do it because if not, they have no chance to make their money back.