Great work @1miau. If you don't mind i would like to do Polish translation.
There are probably millions of KYC data sets on the black market, with this number increasing daily as KYC enforcement becomes more widespread.
I will quote my post here that i made for a guy who was pro restrictions and pro KYC:
~50$ - that's how much you need to pay for KYC photos on darknet.
~100$ - that's how much you need to pay for credit card that is registered on random guy.
Also ICOs scammers has thousands of ID from their KYC that they demanded from their clients. Sometimes i think that this is a main income from today's ICOs. You get 1000 bounty hunters that perform KYC to get reward and you have 50 000$ from darknet. You don't need to sell even a single token during ICO.
Any restrictions will only makes things harder for honest guys. Scammers will always find a way to scam.
And actual data right from darknet:
By the way, do you have a source where we can see this tyranny scandalous activity of selling KYC information is happening?
I will not share darknet market links here because i don't know if its not against BTT (and personally i don't want to promote that) rules but i can link you this article to prove that I didn't made it up:
https://www.ccn.com/hacked-customer-data-from-world-leading-cryptocurrency-exchanges-for-sale-on-the-dark-web/And photo of random vendor selling KYC data:

And if some may think that exchanges need photo with you holding a piece of paper with date than you need to know that 100$ is enough for fake ID.

So as I already said. Any restrictions will only disturb honest users. Every KYC, every coin holding if they are tailed with scam etc. Scammers will always find a way to scam and wash dirty money.
Scammers have fake IDs, KYC data, they sell OTC - P2P, they spread it through dozen of exchanges and cantors they may even use it to pay for signature campaigns for they current business (casino, exchange). It is possible that your address is already tailed. It is possible that they have their own exchange.
In present world you don't even need to collect single $ from ICO to call it successful. All you need to do is no-KYC bounty and change it to KYC bounty after 2 months.