This is true, one can't compare the degree of safety between performing KYC for trusted companies versus brand new or shady projects. However, KYC always carries a risk, we have seen many times with leading companies in their sector, like in Ledger's case where data from 270K crypto wallet buyers were exposed: so no matter how big and secure the company is, there can always be weak points. In fact, the larger the company the more likely it is to be targeted.