I agree in general with your statement. Playing devil's advocate though, since I have been there, when someone first starts learning about bitcoin, they may not be very knowleageable in terms of privacy. So, I 'll speak for myself here, saying that, at first, I knew I had to take my coins off of exchanges, so I did. But, the mistake was made... I bought some coins through CEXs because I wanted to buy bitcoin as soon as I learnt about it. I was fascinated by it. Then, I joined the forum and I started going deep down the privacy rabbit hole. This is where I decided to stop using CEXs. But, I mean, mistakes can happen. The point is, we should fix them.
Not only you, but most of us made the same mistakes. I can speak for myself. I have used Coinbase as my first Bitcoin wallet. In some countries, most people still learn about Bitcoin from the exchange groups or trading groups. They do not see Bitcoin as one of the privacy enhancement tools. They use Bitcoin and other crypto to learn to trade on those centralized exchanges.
Once we do the KYC, we cannot undo that. My identities are already online and I never know if their 3rd party provider going to sell my KYC info on the darknet or not. I don't know if you are aware or not, but a well-known exchange accepts the claim that their 3rd party partner (who does the KYC process) sells the user information on the internet.