I've just received an email from them, but there isn't any substantial information yet since I'm still waiting for a reply. Do you still recommend creating a Type 3 Flag, or should I hold off?
If they were honest and truly concerned about their reputation and customer satisfaction, they would have responded to you long ago and returned your funds. This long delay clearly shows they are untrustworthy.. Take a look now at kycnot.me and the screenshot I attached. It's good that they've placed a warning message at the top, visible to anyone choosing to use their exchange regarding your ongoing case.

Also, their representative on the forum did not follow up on your case until the end after their last reply in your thread, and their last activity on the forum was 7 days ago.
Trust pilot doesn't show specific issues but selective scam (or in general "issues) can be somewhat common in crypto space ... For sure the flag could help other people but I would focus also to understand what it can be really done for your case.
We cannot fully rely on Trustpilot because I have even found that they have recently become lenient with fake and paid reviews, and most of the reviews came from unverified accounts.
or should I hold off?
Why? So they can keep pretending they're not scammers for a few more months, making new victims?
I completely agree with you; the OP should create a Type 3 Flag ASAP.