that seems rather doubtful. i've never used bitpay to pay a service where i've KYC'd, and i really don't think browser/IP/blockchain analysis is a functional replacement for a KYC program that demands official photo ID. i don't think a legal compliance-minded company like bitpay would operate that way, but i could be wrong.
Some people report having to undergo KYC, some don't, perhaps what's happening is they demand KYC of people whose activity they deem "suspicious" and leave others alone (below certain transaction thresholds), or vice versa, they treat everyone with suspicion, except those who would have unmasked themselves in some way (again, only for smaller transactions).
we'll probably know a lot more in a couple weeks as more reports come out.
Yes, more data points should give a clearer picture.