IMO, I think KYC is needed for both ICO project and bounty campaign. You guys also know that almost ICO projects at the moment don't allow investors come from US or few countries to invest in their projects that why they have to know their customers identity to make sure that they're not come from countries which banned. Beside KYC is also a good way to avoid cheaters ruin bounty campaign.