I would make KYC a voluntary affair if the investor wants it to go through and thereby secure damages in force majeure situations. For the participants of the bounty program KYC is needed but it must be carried out before participating in the project.