Though personally I'm not favor to do this kyc since we're not investors however we can't do anything about it since only the team can decide whether they gonna require it or not.
As he mentions in the original post, the problem is that a lot of bounties decide to ask for KYC only after they ended.
And there are even such scumbags who write with big bolded red letters that KYC wont happen and then go dlete this message after ICO has ended and ask for KYC.
Actually people who live in EU can take action using GDPR which provides legal basis in various ways. This offcourse would work only with those teams who are in reach ( they are based in country which is not 3rd world country where law cant be effectively used).