Yes, we update this list whenever necessary; exchanges have already been added and removed from the list since it was first published (e.g. ByBit or MEXC have recently been removed).
I am glad to hear that you are making changes when it's needed.
Your mixed and aggregated pools are for bitcoin only. What about other assets that your exchange supports? For instance, ether and USDT. What risk score is given to these coins that come out of your address now, particularly after the Bybit hack and the tag visible above your address on Ethetscan? Has it affected eXch in any way?