Agree with that. In my opinion giving your documents is too risky. They can be used to scam people, steal your identity or they can simply sell them to third party.
Even if they are honest, they can store your personal data on unsecure computer, and someone else can steal your data.
I strongly advise to avoid any kind of KYC specially with sans of your ID/passport.
Keeping out those valuable informations cant really be guaranteed even if we do talk about legit projects that do ask KYC and same as you said it do still have the risk or tendency to be compromised or steal out by other people which you would always have the risk for your identity to be used up on other means.