The real question is, can you ask the exchange these questions? And even if you do, are you going to get the answers you are looking to hear? I don't think so. The world has been running on this condition: Don't ask too many questions when you are being provided with the tools or services you require, because if you refuse to get them, someone else will, so the one giving it to you doesn't actually need you, but it's you who needs it.

We use these exchanges because we have to, we don't have enough functionality or anything in decentralized platforms that we can find in these, and since they stay operational or have been operational for a good few years, we tend to trust that they will keep our data safe, and we hand it over like that, no questions asked.

It's true, our data could get into wrong hands if they are using third-parties for verification purposes, but again, since they gained their reputation, their customers barely ask many questions about anything they do.