On one hand, they are obliged by law to collect those information, on the other hand, they didn't care much about security.
We need to stop this. KYC is ruining the whole crypto idea.