...however for bounty campaigns that didn't inform us KYC would be required, this is in my opinion against our rights.
It is true, they are putting conditions to pay after the work is done. I don´t think we need to take legal action. You should do as follows: 1st ask in their telegram is they are going to ask for it. Anything that is not a clear "NO" should discourage you from participating.
If, after a clear no they still do ask for KYC make sure that you let your opinion about those ICO be known. Even after the ICO, bad publicity means less value for their token and influence works in both ways.