For example if your crypto is the proceeds of ransomware, you're going to have a hard time cashing out without using something like Monero (which effectively has no offramps) without going through an exchange that knows perfectly well that you're trying to touch tainted goods. Exchanges like Binance that just don't bother to check who their customers are when they withdraw cash for such assets are just as critical to the ransomware plague as any security bug or social engineering issue. It's one of the reasons that pre-crypto, even though ransomware was technically feasible, it was never able to grow into a large-scale operation--no offramps. But hey maybe the official stance of CZ supporters is now that ransomware is good, actually, and if you don't like it it's because you have partisan bias (???)
CZ is the first and only known first-time offender in U.S. history to receive a prison sentence for this single, non-fraud-related charge of improper platform AML KYC implementation. Big banks routinely pay a fine for this, and never face imprisonment. The judge found no evidence that he knew of any illicit transactions and that it was reasonable for him to believe there were no illicit funds on the platform. Credit where it's due, they somehow pulled off a 4 month sentence for this unprecedented charge. And now it's all for naught.
Historically bank CEOs have been smart enough to note this difference.