they must add KYC for bounty hunters even if ico doesn't have KYC but a lot of bounties are just scams and a lot of bounty managers are scammer
KYC will not help to remove set of accounts and swindlers. Even I consider on turn if the project demands to load not only the passport but also demands still the reference from bank, the driver's license, then the project unambiguously swindlers and to you it is not necessary to participate in it.
Only think of whom information your personal and information can fall into hands that you are engaged in cryptocurrency.