It is what it is. You have to implement KYC if you want fiat rails. A merchant can't KYC every single person that comes to the store. But you could build a system to eventually ban wallets that could be tied to criminal activity.
The merchant can also pick to use Lightning and keep the Bitcoin instead of selling it for fiat.
The merchant can also pick to use Lightning and keep the Bitcoin instead of selling it for fiat.