Xactly. In all what described there's one problem. I should trust exchange until I withdraw sats behind my private key and then I can talk about full control