But they DO need privacy, they're more at risk of targeted theft than regular users. ZCash fails at this by making it impossibly hard for an exchange to allow z

But they DO need privacy, they're more at risk of targeted theft than regular users. ZCash fails at this by making it impossibly hard for an exchange to allow z-address withdrawals, and impossibly hard for a mobile app / hardware wallet to support them, which means large holders withdrawing from an exchange are painting a target on their back.