Hey Everyone I've been working at a new exchange for almost a year now and were finally almost to market. We require signatures from both parties (exchange/user) for every action taken. We think this approach is going to make us the most accountable as you'll always have the signatures to prove your account state if we mess around.
That is good and bad in a way. I will have my money stuck on your exchange forever if the exchange decides not to sign my withdrawal request? Exchanges have a reputation for holding users withdrawals for a number of reasons. This certainly isn't going to work in users favor in times of a dispute.