The network itself is still quite good for privacy to some extent. It is impossible to expect the government would allow any asset or any exchange to accept users without any KYC, they're doing some business and need to hold some responsibility. The AML thing and so on is almost guaranteed to be mandatory when you use a centralized service. So, the solution would be don't use them. It's your call.