yes you are right it is very terrible because it provides very sensitive information like that just to get tokens that are given from ico or airdrop which requires you to complete KYC in my opinion it is a very bad act.