Correct, hence everyone should buy miners instead. But excluding that option, some random pleb learning your name is 1000x then using a KYC exchange and giving up your name, address, email, social security, passport, face scan etc. Not to mention due to volume that information is sitting in a honeypot.