Doesn't HRF require grantees to KYC in front of them? That's what I've heard and if true then it could be considered a trap as in the future contributing to bitcoin privacy preserving software may be deemed as ML. I've heard about JAM grantees who rejected the money and that was one of the reasons they did.