Are you both saying that exchanges will use their customers' bitcoins to claim bytes for themselves?
Why not? All they need to do is link their BTC addresses.
After all, you don't get POS rewards from exchange balances.
Well, technically they can do it, if they don't care what people think when it is uncovered.