They state they are financial institution and compliant with Swiss laws ,etc.
Anyway is there always the need to pass KYC in order to invest in an STO?
If they are fully compliant and they are literally calling their own token a security, then yes, most likely they are required by the relevant regulations to conduct verification on their customers or investors.
It also depends on who and which regions they are offering their tokens to, if they bar people from the U.S. or other sensitive areas where tokens are treated as "securities" and as such regulated by the SEC and other bodies from participating, then there could be a chance that they can legally offer their tokens without KYC.
At the end of the day, it's up to their discretion. You as an investor has really no control. If you aren't comfortable with providing your info, don't.