unfortunately that is probably the case more often than not
that's why KYC policies are not the ultimate solution and can even be harmful by incentivizing a parallel market for people's documents.
But the thing is it's even more dangerous when you are using any third party software for it whom you don't trust and they can easily sell off your documents in the dark web to some hackers for withdrawal of illicit funds.So this must be taken care of that document you submit are of your own and on legit platform but I am not comfortable with high level documentation on any platform.