I see there are two sides. One side is, it better to ask KYC because to protect the bounty programs from scammers and cheaters. Some of the members maintaining multiple accounts to participate bounty program. Some of the member user other accounts to get rewards. If we consider about those facts, it is better to have KYC process for bounty hunters.
second thing is, KYC is the most valuable document for the person. KYC documents are Priceless. If someone stole KYC, he can a lot terrible thing with that person's' identity. If the bounty program related ICO is not a rated and well know ICO, then I'll not submit my KYC to get the rewards.