maybe not, in binance the people deposit to their account using a legacy address (this is the malicious part) but they (binance) tend to consolidate them all in one segwit address,

maybe they do this for compatibility, and they can improve the efficiency of the usage of the blockchain but is normal that a consolidation of a high-volume exchange will take a lot of space of the blockchain .