Yes they are. If a big enchange gets hacked it can affect tens or hundreds of thousands of people, that sounds pretty centralized to me. I don't know why decentralized exchanges aren't more popular, but they will be eventually.