Recursive covenants dont automatically enable onchain kyc. You can do onchain kyc today with 2/2 multisig.