what i imagine they are doing is keeping the staked eth in a staking validator and giving "different" eth to the customer when they ask for withdrawal.

since they own all of the staked eth as an exchange they continue earning yield but the customer does not