But this has been the standard even when it comes to centralised exchanges. If someone steals your money and sends it to an exchange address that you can identify. Once you write to them asking them to block the account or reveal the person behind it, they will simply tell you to first process a court order.
You don't want your funds getting frozen "proactively" just because someone said so, yet you were not involved in any hack.
I can understand the restraint when the theft happens to a random individual, and there should be a higher burden in that situation to avoid frivolous complaints wasting their resources. An exchange being hacked for hundreds of millions of dollars is very different and almost any reputable CEX would take action as soon as they became aware of the situation, not waiting until there was a legal order.
Circle’s critics aren’t even arguing that they should proactively freeze coins. They are a regulated financial institution, based in the United States, and the expectation is that they should not allow criminals acts to happen so brazenly right under their noses. For some reason these rules are applied to non-custodial wallet developers, but not to centralized stablecoin issuers who can afford to spend millions of dollars influencing the right people in Washington.