The fact is that we have no information about who operates this account - no name, IP, or location.
Why not operate directly a DEX instead of CEX?
I don't think how can you able to manage to gain trust with your user with this idea. Nowadays, DEX is much more safer than CEX, since DEXs operate on smart contracts without central control.
This came to mind What if your exchange wallet receive a coin from a hacker, it might your exchange wallet address might be flagged suspicious activities by the authorities.