I agree with that one. I think "KYC/AML" is being positioned as bad-thing-prevention policies, whereas in practice those are purely User Exclusion policies.

We should be asking: Why would you want to exclude those people? Why are you excluding especially people of color and people without ID?