I consider it fair to do kyc for bounties only when the projects themselves will be registered in sec.
For bounty hunters, KYC is completely unnecessary. It is used to identify investors who put money in the ICO, which is to avoid abuse. Bounty hunters receive tokens for their work so they do not invest their money directly in ICO.