ICOs  hiring 3rd parties to conduct KYC so I don't think there is anything to worry about. Only if the project itself did the KYC is the only situation I will worry about my personal documents. And also guys, the responsibility is in your hands. If you see a red flag about the project and asks for KYC then don't hesitate to refuse and just leave them.