While this is correct in general, DEX or P2P exchanges like Bisq do have some risks too.
I wouldn't go as far as to say it's risk free to use p2p exchanges, but the risks are significantly lower than a situation where your data was leaked by CEX. If you data is leaked by a CEX, then you know it's going to end up the hands of criminals. Hundreds, if not thousands of them.
When dealing with a p2p trade partner, you're only leaking selective data to one individual. Using the US as an example, and assuming that everyone with a past felony conviction is threat, that means 0.05% of your trade partners are likely to use your information for no-good. Statistics also suggest that 70% are released felons are likely to repeat offenses. One out of 20 to 25 trade partners posing a threat isn't comforting, but we have to consider other circumstances; the odds of someone with a past felony conviction using a p2p exchange and the nature of the original felony. Nonetheless, comparing that to the certainty of knowing your data is the wrong hands due to CEX leak makes it the preferable risk, in my opinion.
In another thread, Zelle was recommended in this case, but it's not available everywhere.
Zell is okay, but it's only available in the US and only select banks (mostly the big ones we try to avoid, lol.) There are some small regional banks that offer it, and even some Credit Unions, and it's catching on so more are coming on-line all the time. As for personal data, you have to disclose your real name, and an email address or your phone number. Certainly not a lot of data, but that could be enough if someone is diligent and wants to find you. For someone like me with a unique name on this side of the pond, it might make it too easy.
Keep your powder dry.