Makes sense... But in the case of non-kyc, they theoretically don't have any user information. However, they are more expensive. In the end of the day, minimize trust is the correct route.