But how would you know which exact company your data got compromised. A lot of people have accounts on several platforms and you fill your details on all of them because you need to have unrestricted access to the services being provided. Hacks still happen today even to reputable exchange sites but because it does not involve movement of funds and not getting the right media attention, it looks as if nothing happened.
I really don't have issues with sites asking for KYCs but concern is who is ensuring they themselves are not compromising on the information entrusted to them and it being uniform rather than arbitrary request that we see on every platform. The moment that is addressed, I think its all going to be for the best.