The problem is that we have no choice when they require us to pass verification. All conducted IDO require passing KYC and if you do not agree with this requirement, then you need to refuse to participate in the public sale of tokens. But some campaigns require verification even before you hit the whitelist. Thus, it is not yet known whether you will receive your coins or not, but you must pass the verification. Such moments should be avoided.
Submitting KYC in the bounty campaign is the most dangerous thing you can do with your personal information since there is no guarantee that they will gonna keep it privately or not. some of the centralized exchange demands it in order for you to trade and to withdraw your money from their platform. I read some of the participants of bounties have been forced to submit their personal information so that they will able to get their rewards from those exchanges. if they don't submit anything, they won't be able to withdraw anything.