Yes I agree with the first step. For those who are afraid to do KYC maybe they have some agenda or did something. I know how sensitive KYC is and we shouldn't not let give our details so easily. If you dont want KYC then, dont participate on the campaign. No one is forcing you to join hence find one without any KYC simple as that like the OP said.
The problem for bounty hunters right now is that the ICO teams first silence the need to pass the KYC test, or directly say that there will be no such test, and then, at the end of the ICO, change their mind and announce the KYC test. In fact, this is a fraud on the part of the ICO team, since after that many bounty hunters for various reasons cannot pass this test and lose their earned tokens. A KYC check on bounty hunters is illegal, but if it is done, it should be carried out at an early stage, or at least be able to familiarize yourself with the requirements of this check, so that we can assess whether we can pass it further.