if they are allowing withdrawals then they are somehow hedging their customer liability with an Staked-eth derivative
Discussion
This is going to burn more exchanges to the ground, isn't it?
what i imagine they are doing is keeping the staked eth in a staking validator and giving "different" eth to the customer when they ask for withdrawal.
since they own all of the staked eth as an exchange they continue earning yield but the customer does not