That question is highly dependent on jurisdiction. The prevailing opinion right now is that Lightning nodes are not subject to KYC regulations in the US.
What is to prevent the network from facilitating money laundering and purchase of illegal goods?