Yes, bounty hunters are not investors and there's no reason why they should do any KYC but if you guys sees KYC implementation by project owners for the bounty hunters as a cheat I think the best way to stop this from happening again is for bounty hunters not to join any project that ask for bounty hunters KYC.
but I think KYC is not the solution to cheating by a bounty hunter. KYC is only for data collection of the existence of all asset holders and supporters of the project. they make bounty hunters as part of the community just like investors, where they all also do KYC.