Some statements from telegram form RenegadeMind regarding that topic:
The SEC came out with some comments on the topic. We're not the first though. There are others doing it as well. It also applies to airdrops AFAIK.
The issue is that now that they've said that, the ball is in our court to become compliant.
Not being compliant can become a nightmare down the road, and could potentially put the project at risk. It's simply too risky not to be compliant. So, while others may choose to not make best efforts to come into compliance, we have to mitigate those risks.
I'm not a lawyer and just listen to the advice our lawyer gives us. The reality is that governments can throw immense resources at a legal case, and at the end of the day, they can bury you in legal costs if they don't break you.
The current regulatory environment is rather uncertain. As such, the current legal advice we've received is to do KYC for all purchases. However, the future is uncertain, and we may see some changes or receive some signals from regulators that allow us to forego KYC for purchases under a given limit (e.g. under $10k USD).
So stop the FUD already.