I know that most of exchanges that demand KYC has strict Policy and such thing, but what if our document got leaked or took by a hacker, or even those exchange itself sell it to a bad person, and the company behind the exchange on the other side of the world. We could not even sue the exchange. We can't do anything.
This does make a lot of sense. However, legitimate services wouldn't give up such information to third parties if they're not related to law enforcement - you could get in big trouble for that. But still, the argument is really valid - never give up your ID unless you trust a platform and/or absolutely have to.
"However, legitimate services wouldn't give up such information to third parties if they're not related to law enforcement"
About on this bolded line, it isnt really necessary to have this indication because 3rd parties do have the full control on how they would store and used up the
informations being gathered to its users.Most people here on Crypto do value anonymity and giving out any personal documentations is really a contrary thing towards on what
they are expecting.