You've really raised a very good point, some KYC request for bank account statement and other government issued documents which is confidential to individual, announcing KYC at the end of the bounty program is wrong, all managers should notify every member about the KYC at the beginning of the campaign.