I wonder if it says in their terms of service that they can decide to start KYC’ing users later on and hold your money hostage.

If that’s the case, you kinda use their service or store money there at your own risk.