I'd never do KYC airdrops or send any fragile data to unknown developers of any project. I feel a bit more safe if doing the KYC on a major exchange.