I agree with you. If it's a security issue, I think enabling 2FA is safe enough
Unlike KYC where the player gives the documents and other personal details that are verified and kept in the casino database or other third-party data hosting sites which is prone to the risk of a hack or government access to those documents.
It is that there will always be a doubt, besides that leaving our data is already something very delicate, and if the casino or platform leaves that data in a third-party database it is much more delicate and difficult to trust, for that reason the policies KYC of many casinos will always be quite strong when it comes to peddlers and thanks to those kyc policies some players have left, they prefer to go to platforms that are decentralized and play there, so they don't get charged for every move, but the important thing for many is privacy and anonymity.