on a long enough time-scale, all custodial services will either a) kyc, b) exit scam, or c) get hacked

This is unfortunate, but probably true

there are a bunch of options at https://kycnot.me/

What an awesome page, bookmarked, thanks!