I have a friend who did nothing except buy some bitcoin a few years ago and leave it on Coinbase. Never sold a single sat. When it came time to finally withdraw to cold storage, they locked the account and it took about 3 months of back-and-forth providing more KYC and even being forced to buy and install anti-virus software (and provide receipts) before they would release the funds. Exchanges are a nightmare.