I think that the problem that many bounty hunters have is not doing KYC but giving personal data to perfect strangers and most of times "scammers". I think a possible solution is to require that KYC must be done using a trusted third part app like CIVIC for example, so that KYC will be done and your personal data will not be in ICO team hands
Usually those who do KYC are third parties and there are some who use application services, in my opinion it can make the KYC process easier to do. KYC is a must because it will have such a huge impact on the success of a project. KYC is a thing that needs to be done and for anyone who rejects it must be a matter of suspicion, KYC can reduce Alt-accounts and it's proven to work on many projects.