Regardless, that's not justified. People should think twice before sending off their KYC documents. That goes for investors, too. Bee Token and Sentinel Chain are just two recent examples of ICOs that were compromised and leaked investor KYC data. Is it worth getting your identity stolen over an ICO investment? Probably not, but maybe, if you think you'll 1000x your capital.
Is it worth getting your identity stolen over a bounty hunt? Absolutely not! People should really stop giving their ID to everyone who asks...
I totally agree with your point of view!
It is a shame bounty managers request an identity document just to participate in a bounty campaign, the level of privacy invasion of those people has turned to be unacceptable! My opinion is to avoid such campaigns...