I didn't think you were obliged to answer for Exolix, until you decided to answer for Exolix by saying "they're a company and they have to follow laws" which is bullshit. Why is it bullshit? It's bullshit because...
*how can Exolix promise not to KYC Monerujo users if their KYC is only done to comply with the law?*
If you don't wan to be held to that, next time maybe say something like "we will ask them to answer that question for themselves". Of course, I suspect you would've done just that, except that you know the answer to the question.