If KYC is needed for a bounty and I already completed months of work then I think I wouldn't have other choice then to send my personal data, however, airdrops are currently a bit lame and I don't think sending that kind of info is worth it at the end.