I think there is no need for legal action against that, lets just all avoid participating in bounties requiring KYC, as I have always done. The only problem is that some bounty campaigns only reveal that they need KYC after the campaign period.