8- KYC issue: I prefer not to do KYC for airdrops or bounties. If their database gets hacked, your passport can end up in Dark web. For exchanges, I always try to use my Driving License instead of my passport for KYC (some of them only accepts passport :/ )
9- For airdrops I use another email. Don't want my original email get spam mails and I want my exchange email to be safe.
In the first place, no half-decent airdrop requires AML/KYC in the first place. Not like when in the 2016-2018 era where the requirement is pretty much AML/KYC and social media shares, the good airdrops today just requires protocol usage (which is a good and more efficient way).
If you want a bigger list:
https://chainsec.io/checklist