Sure they do: Take your business elsewhere.
Yeah, I mean after you've made an account and deposited money. You can't say "Hey, I changed my mind, give my 'tainted' coins back". They confiscate your property and you either give it up, or give them what they want, that is personal data. They're blackmailing you straight. If they didn't, you could have the option to provide your UTXO on some /taint_check, and see yourself if your money is "tainted", without handing it over to some third party. You're correct. but its a time concern. Your funds are locked for who knows how long. Depend on your luck.
if it been locked in 2009 and released in 2022 the I don't mined this scenario
lets emphasise things
unless an exchange has received a COURT ORDER from a court to confiscate coins and pass onto courts/regulators as temporary guardians of the confiscated coins, which then ends up in the user having to go to court to prove innocence.. .. again until that point. a exchange cannot confiscate your coins
they can however at just the red flag level. limit your use of their service (not allow you access to the exchange order book to buy/sell..) but you still have and legally should have access to view balance and request to withdraw said balance and close account. which should be honoured within a reasonable time.
some exchanges try to implement their own business terms of service to try to suggest that by agreeing to become a user of their exchange you agree to not sue them if they dont allow you to get a withdrawl to close account. where they pretend it forces you into only being able to seek a resolution through THEIR arbitration systems. but if they breach their own rules especially the regulators rules you can still sue them in court.
it actually is worth reading regulations and exchanges own terms and conditions just so you can learn how to operate in a manner to avoid the headaches of regulations and business terms