Wouldn’t you hold your own insurance against the coins in your custody?
If you fuck up, you make a claim against your policy and make your customer whole.
In terms of KYC, what about knowing my name, email, phone, address etc. makes me risk assessable?