Centralized exchanges have to obey to many laws, regulations as well as request from governments and regulatory institutions to keep their business running.

It's a matter of time for a centralized exchange turns on their Mandatory KYC policy on their platform.
Under pressure from government, they can satisfy government by leaking data of their users.

We all know about that risk so it is not a shock news if Kraken exchange do it to the IRS.

Why KYC is extremely dangerous - and useless?