KYC is not required. Do you want to present yourself as decentralized as possible?
Let's look at the situation.
Email trader hacked. Got access to PrimeXBT. Trader understands that he has lost his login information and he has 10,000 USD on his account. He writes in technical support to restore access.
How do you confirm his identity if KYC is not required?
Maybe you should think about how to enter? How do you plan to implement technical support? Only chat or you can call?