I never considered that ICO's would be selling info as a source of income versus anything else, but that is an interesting point.
The vast amount of ICO's that have appeared, especially when btc and eth were nearing their ATH was intense, and the amount of cookie cutter websites / companies did make me nervous enough to never participate in an actual ICO, but I do wonder if there is a list of failed ICO's and companies suspected of intentionally propping up ICO's to mine people's info... that would be a worthwhile endeavor.
KYCs are not the problem here. The problem I see is where you are entrusting your information to. Because their are certain ICOs that will only fish out your information as it has more value for them rather than the token they are creating. KYCs are a requirement of some countries' government as it is their way of regulating or being in touch with their citizens. What I would normally do before trusting my personal information to other entities such as ICOs or even exchanges I will research on them if they have a good background.