A "De-Fi" platform complying with KYC/AML laws would no longer be decentralized. That's because a third party would be required to collect all of your personally-identifiable information to share it with the government. Besides, KYC will defeat crypto/Blockchain tech's intended purpose (which is banking for the unbanked). If we want decentralized finance to work, KYC must be out of the system for good. Hacks, theft, and other undesired situations will always happen especially when there are millions (if not, billions) of dollars on the line.
It's up to you to inspect the code in order to determine if the "De-Fi" platform's smart contract is as secure and reliable as it claims to be. That is if you have CS knowledge or are a security expert. Developers can easily send their smart contracts for auditing if they're interested in attracting the masses to their project. The whole space is just starting to blossom, so I'd say we should give "De-Fi" more time to mature enough for mainstream use. Just my opinion