Developers of any exchange can provide third-party software and assure that it is safe. In fact, it may hide itself a spy virus.
You're aren't pertaining with Dex because if we do talk about on how dexes work then this wont fit out yet we know that they do integrate Metamask for smart contracts or scatter for EOS and so on.