Yeah! Better to ask for KYC requirement at first. But there is one thing which is best thing for it. There is a rules which the bounty manager should initiates this. They only got the kyc requirements of every participants once the distribution of token is final to avoid stealing of personal identity of others.
each manager or team has a different policy. sometimes there are announcements that do not need KYC but after the campaign is finished they announce a new rule for charging KYC. we as bounty hunters can only follow to get rewards. as long as the requirements are still normal I don't think it's a big problem.