I did KYC on 3 platforms which included ID, bank statements as to where funds come from and photos of my face. By that experience I think that requesting ID and documents in case of dispute is quite light. That comes with assumption that such disputes don't happen to most users. I'm not tech but IP for eg can be changed as there's TOR (if they don't block exit nodes).