KYC can easily be faked these days whether it maybe users or team developers. No one must take their investment decision solely based on KYC results. For bounty hunters it is a tideous task. They are not investing anything and they are not customers so there is really no need of KYC for them.
KYC should be 5 sec video and saying the required words to be accepted, maybe the project team needs more storage to store the videos, but it really reduce the existance of fake KYC and it will make the crypto environtment keep healthy from fake users and bots
Even I thought of similar video solutions for KYC verification. As you said, the problem is with its storage. Even this can be hacked and data can be sold in dark markets. Whatever this is certainly better than a photo showing KYC holding their documents which shouldn't be taken seriously.