From my point of view, it's not about regulations its about doing formality of having KYC in place. By doing so, they don't need to be stringent to verify each identity. Also, data can be sold to other companies where KYC third parties are involved and make money out of it.
In short words, not the project nor KYC authority cares if data is accurate or not. Its just numbers for them.