They can't just pay BAT directly out to an address and bypass KYC by not providing an exchange?

Would seem a really stupid move...