Yes most of this companies do proper verification of companies owners and KYC verification. When it comes to smart contract and this audit companies verification they don't just use ID sent by the team to make verification but they also go as far as asking for public verification from their government and other recognize institution which they match the record they got from those institution and bodies with the ones provided by them, and when they are correct and passed they will approve it.

Where I see users cheat this KYC process is when it's comes to exchange verification and bounty verification process they just go to the internet download an I'd card and edit it add their picture on it and submit since government do not give those bodies permission to access their data's they can not actually know when document is right or wrong and most of the time bot are in charge of the verification process.