The fact that the KYC resides with the blockchain (i assume it will not be on chain though), makes security so much more important, since it becomes a preferred target of attack.

Yes i think that is the key point. i sat through the recent Worbli conference and was not convinced that it has the recsources to hold off attacks or a determined hostile state