This is the only explicit mention of companies applying "risk assessment":

(Knox suspects she has ended up on a blacklist at Plaid, a provider of technology plumbing to large crypto exchanges like Gemini, Kraken, and Robinhood, leading to the repeated bans. Freya Petersen, spokesperson for Plaid, says no such list exists, but that all firms that wish to use its services are subject to a standard risk assessment process, factoring in the industry in which they operate.) -Wired

With non-kyc exchanges and shops, and growing the XMR economy.