I think that the problem that many bounty hunters have is not doing KYC but giving personal data to perfect strangers and most of times "scammers". I think a possible solution is to require that KYC must be done using a trusted third part app like CIVIC for example, so that KYC will be done and your personal data will not be in ICO team hands