For a completely privacy leaning service, clearnet should be the last option. In fact, it should just be for information/tutorials while the actual exchanging is done over Tor mirrors (You can borrow a leaf from robosats -
https://learn.robosats.org)
Also, you might want to have a few more numbers of mirrors because once you get popular, trust me, you are going to get bombarded to DDos attacks.
Yeah we are aware of the DDoS attacks. We've been watching other exchanges experiencing them. We'll be launching the tor mirrors + no JS website very soon. We just launched the clearnet version first to be more accessible for users.
Thanks for the feedback!