I think in most cases bounty hunters use fake KYC data. Such data is full on the black market. This is not a problem. The main problem is absolutely the devaluation coin.
Even if they use other people's data. So they bought them somewhere. And that means they sold to the network projects that require KYC. Therefore, the passage of this procedure does not give us the security of our data.