If exchanges choose to use CipherTrace's implementation that would mean that the identities would be in the hands of only a few people ie.
Granted if people have to do KYC through an exchange, they've already willingly gave their information. This just adds a level of protection.
I wonder what will happen over time to DEXs