This is true lots of scam or fake ICOs implement KYC just to gather the information about you just to gain more info about you and use it for their purposes in the future. So you should beware where you upload your information. The KYC is usually requested if the project succeeded already then yes but before that it is pointless. For example my last search DexAge ICO for the decentralized p2p escrow trading exchange is considered to implement KYC too but not before they finish their project and go out on the market so that looks right as it should be.