The reasons that KYC should never be the default are obvious when examined from a lens of security and privacy.