Most KYC exchanges have a delay, which is a risk. You can add $s to a service like Strike and use a noKYC P2P exchange like Robosats for instant settlement over lightning and then loop out for on chain sats.