How will the project handle legal aspects
A lot of the legal machinery can work slowly, and a project can't haphazardly acquire necessary legal documents.
Many projects demand KYC; while many does not demand KYC - which they should, for the legal aspect.
KYC = Know Your Customer, essentially providing things along the lines of a passport picture and various personal information.
This is due to things such as Money Laundering.
If a project doesn't demand KYC, at this point in time, that is in my view, a reason for concern of the project's future, in terms of facing legal issues, and thus the projects legitimacy in general.
Scam projects could very well sell your information.
This also applies for bounties - be careful with what information you provide!
I personally join bounties simply for 'why not', but I never join any project asking for my personal information.
This is an interesting point. So we need to be concerned about projects that doesn't require KYC, but I don't want to give out my personal information either - seems like a dilemma. What should we do then?
If you are talking about investing in ICOs it seems like you should be comfortable with providing them with your personal information, if they Don't demand it then they're probably not very serious actors to begin with (since it's practically a demand nowadays that they have to collect information to comply with regulation)?
and if you are Not comfortable with providing your personal information to that specific "company", we could assume that the same reasons you have for that, applies to the quality of their project too?
although I guess that's a bit obvious. it's a dilemma indeed.
if you're worried about providing information in general - then there's not much to do I guess!
Sure you might miss out a bit, but not necessarily.. if you do your research and gather a list of "interesting" projects and when their coins/tokens gets distributed, you could likely purchase them at a very fair price early on (when bounty sellers/early investors or others) sells them on some decentralized exchange?
or you could maybe join some type of "small investment group" (I know there's some sometimes that pool together funds), that way only one person would have to give out their info.

as you said, dilemma!