I don't think that this is happening right now. There are a lot of places where terrorists can buy easily real identity documents for cheap prices ( especially on the dark web websites), without passing per the whole procedure of creating a startup project, which is a lot more complicated for them and a lot more expensive too. But I agree that you have to make sure the ICO project is legitimate before sending any documents to its team members.