Picking any exchange would be hard, I will give you that much. Even if you are dealing with places like Binance or Coinbase, it could become a difficulty because they require KYC and they could still get hacked in a way that your KYC could be shared with the world.

It's not always the money that gets stolen, the hackers would steal anything they could find, even if it is just staff names type of simple stuff. This means that we need to be careful when picking them. This is why I have suggested my friend who got in recently to use p2p, then use DEX and when he wanted to get out, use p2p again. This is the best method for your own privacy to stay intact.