Even more amusing is that the coins that the exchange returned to me had a 1% risk score. In a way, they 'cleaned' my coins even though they refused to process the swap order.

Did they consolidate your coins to their own address, or did they return it directly from the address you deposited to?
Who determines this "risk score"? I'd say this just confirms the "risk score" is mostly arbitrary.