I don't think the Polymath KYC is legit. I heard that many of airdrop participant sending a fake ID to the application and they still get the airdrop rewards.
I think it's impossible the check all the KYC data one by one.