Few years ago, cexes didn't require any kyc, they would provide all their services with just email and password, but things have changed and now they require kyc because government regulations forced them to do so, so of course governments will be getting users data.
This is why I prefer dexes because there is no personal info involved — no data given, no data passed elsewhere.