Nowadays, the bounty hunters are becoming smart , they asked first if the project needs a kyc , so they have an option to join or not and so the campaign managers they are now very clear from the  beginning. It's a personal choice  I guess if you are willing to share your personal data and you are aware the risk.