It depends a lot, if they are going to use money as their first recurse to ejecut and run their ico smoothly, then of course that they will need to collect kyc, otherwise their law is not going to recognize them, and maybe they can shut down their site and ask them for that money.
I dont know how does the law applies in each country, because each government is a whole universe.
But everytime that i see a KYC on an ico program, i instantly close that window, i dont like to provide my details, and less to a group of people who we are never going to know if they project is going to be a success or not.
The same applies with all those exchanges that are using this kind of protocol.
Same here. I think its pointless until you can actually verify it real time.