For me it is clear cheating, because first - in such way they will cut the number of rewards, second - they will collect your data. If they are acting in such way, they easily can continue their cheating. Or for example - sell their database. Anyway i am trying to stay away from such bad players.
How come that it becomes cheating?
As I understood, the bounty that he participated was not requiring them to undergo KYC, the one that reauires them is the exchange where they will be eligible to sell their token. This KYC is not part of the scope of the project because the exchange was not developed together with the project.