KYC for big investors is already required in every project, even small investors are required to verify KYC but not as complex as big investors, and KYC for bounty is to avoid multiple account fraud
Most of the ICO today requires KYC for their investors and also for their bounty campaign for them to able to get their rewards from the bounty campaigns. But many of the bounty hunters do not like KYC because they do not want to give their real identity to anyone. I agree that KYC will only applies for the big investors or just investors of the ICO.