P2p is the safest. There are local exchange startups. They require KYC. I don't trust them because they definitly have to cooperate with the regime.