I always make sure the bounties that I follow really have good potential, I also have concerns about KYC filling, but I believe that the projects that I follow can maintain the security of the personal data that I provide, indeed not all bounties that require KYC have good prospects, I follow a bounty that requires KYC and that do not require KYC, as long as the bounty has a good project, I will join it.
Actually for bounties I cannot assure that they can protect our data or they are legit.
Project that are in ICO are new project, they are just taking a journey hoping to be successful, so they could also fail, and when they fail
they already have our data or information and that's the risky part as they can sell it in the black market.
I am just confident in bounty that does not require KYC.