Yes, definitely agree with this. KYC should be mandatory. We all know that bounty campaigns are full of alt accounts, cheaters etc, though it won't totally eradicate cheaters, it will somehow lessen this kind of activity. About the risk, well it's our role to check what project we are supporting.