Fraud prevention, compliance, and security are the actual hard parts of running a cryptocurrency exchange. Doing these things well has largely determined the winners and losers in the space. I don't know of any major cryptocurrency exchange that outsources them.