Its probably for the same reason that some people still use Trust Wallet -- they have great SEO rankings and somehow manage to skirt any kind of legal repercussion or ISP takedowns, despite having an overwhelmingly poor reputation online.

I remember hearing about FixedFloat's problems years ago in a case where they confiscated a large sum of XMR and demanded documentation proving where it came from. The way they proceeded with subsequent confiscations of BTC and ETH really bothered me: instead of leaving the coins in the customer's deposit address, they immediately transferred them to their main wallets. Since they claim to be performing AML checks on coin sources, the appropriate thing to do would be leave the coins in their freaking outputs rather than mix them in with other funds. This way they could instantly refund users funds, or I guess give them over the law enforcement  which I doubt they've ever actually done.