There are decent ways for exchanges to prove they are solvent without revealing details [1]. It's just that very few of them take the effort to set up the system. If you want decent privacy, it also depends on creditors checking their credit was properly committed.

[1] https://eprint.iacr.org/2015/1008.pdf