Imo, KYC should not be involved in ICO as well. I know it was required by regulation, but it certainly render the "decentralized crowdfunding" meaningless.
There is one upside tho, KYC can limit the investment amount of every participants, thus give everyone equal opportunity to invest.
That's the problem here, the ICO starter want to know where their client's fund coming from and know who is their client but the client by doing KYC also imposing themselves to the risk that their credential data might be sold everywhere maybe in the darknet.
I see some of ICO that do this, they are requiring people to submit their Gov ID and then the ICO turns out to be a scam, they are not announcing that the datas they got will be sold anywhere else but I'm pretty sure that they will since it's also an easy money.
Maybe we really need a platform that's verified by government to connect us into various ICO so that we will be fine.