Any CEX says in the user agreement that they can require KYC and a source of funding from the client and much more. If you have 1-2 thousand dollars there, then there will be no questions until this amount exceeds 10,000 or more.
My friends lost money on such exchanges. They had several thousand and traded for several years. After transferring 20-40 thousand dollars to the exchange, their funds were blocked.
That's one of the main inherent deficiencies of CEXes and a major reason for the existence of DEXes. On the other hand DEXes are much slower and have higher fees per one trade. While they are fine for converting one crypto to another or maybe to/from fiat, they are not suitable for trading algorithms that require latency < 10ms or even < 100ms. So I think that the main problem with DEXes is not low liquidity, I used them in a couple of cases and they are fine as long as you are not in a hurry, but they are just too slow and expensive for many trading algorithms.
Anyone who manages to create an exchange that combines the benefits of DEXes and CEXes will make a killing. It could be a low-latency DEX or maybe a no-KYC CEX with some kind of really smart contract that guarantees the user that he would be able to withdraw his funds thus guaranteeing that the CEX won't be able to block the funds and require a KYC. Or maybe some other kind of system that provides the benefits of both kinds of exchanges.
On the second point, I meant that people talk a lot. Even the most famous hackers were let down by their language and lifestyle.
Yeah, not being able to keep one's mouth shut is the main cause of failure in 95% of cases :-)
But joking aside, most people, including those so called "hackers" don't have a deep understanding of computer security and security in general. So they are rather easy to catch and the main reason some of them are able to get away with their petty crimes is that the governments are busy chasing the big fish and the small ones are not paid attention to. Anything related to the banks' electronic money and the governments' CBDCs is trivially traceable by the government. If we add the fact that transactions of most popular cryptocurrencies are publicly visible and we can be sure that for most people crypto does not add any privacy.