KYC for big investors is already required in every project, even small investors are required to verify KYC but not as complex as big investors, and KYC for bounty is to avoid multiple account fraud
yes you are right, indeed big investors should have to verify KYC. this has even been done by almost all projects. so there is nothing to worry about.
I agree that doing kyc for smaller projects or bounty and airdrops shouldn't be necessary. They do it mainly for money laundering checks so it should be for investors not bounties.