Know your customer, or KYC, is often justified in the name of safety, but centralized safety is still a centralized risk