To put it simply, they might invent "taint" for raw transactions and blocks
I think
you just invented this! I'm not worried a CEX may block funds that were confirmed in block 666 because of whatever reason they come up with. They themselves can't know which block their withdrawals are going to get confirmed in.