Is it not centralized around the exchange provider? I'm just checking into it now. There's also a strong emphasis around KYC/AML and regulatory compliance generally.

Presumably the exchange provider would be able to recover a wallet based on the KYC?

IIRC it doesn't depend on crypto, but it can use crypto. One of the cool features is that you can use different currencies/tokens.