You have to correctly choose where to use KYC, don't carelessly choose and use it, if you use KYC only for ICO I think it's funny,
we never know how the end of the ICO, it will be very risky if your data is scattered and traded!
If a project and an exchange platform provide security and legality for the security of your data, I think it's not a problem
If we don't care about our real identity and we care only with the airdrop/bounty rewards that we will receive then be ready for the consequence that some scammers are just doing this for them to get your data, which in fact they are using this data for them to sell it in darkweb or in a syndicate, so let's be careful about it if we don't want to be a victim someday or that someone will use our name.
Every bounty isn't an approach to collect data to benefit out of the data collected with their personal information. There might be few bounties that were done with specific purpose by the scammers. I believe most of the time KYC is requested to show to the outer world the usage number of the respective token, then is to avoid people from specific countries not participate on any of the programs conducted by the specific project team. This is done to terms and conditions created with legal rules and agreeing to it.