My biggest worry is the fact, that right now anyone can claim that they are "forced by regulators" to proceed with KYC and this is currently the easiest way to collect our personal data by 3rd parties.

Wow,wow, wow...!!! You´re right my friend.
I had not thought about this before.
You have a great point here.

As you say, an organization that qualifies and organizes ICOs promoting companies could be created. Perhaps this would give a framework of legality to the process.

But generally Airdrops hunters are more aware of the attractiveness of the rewards and do not read the small letters. Then already your personal data must be in the wrong hands for a long time ago.
I refer to "Airdrops hunters". These mostly will not be final investors.