What would happen anyway if the identity was stolen and used for illegal things? First of all, you would certainly get a new identity card. But would the data of the stolen ID card be stored somewhere centrally, so that fraudsters could no longer open a bank account, for example?
Surely they will use KYC files for malicious purposes, if we continue KYC to receive airdrop or bounty then I believe in the future we will have trouble with it. I used to participate in the airdrop and now my email is being spammed every day, which is proof of the information being sold.