In practice, the law would protect them if they were the owners of the exchange. But here the "exchange" is just a public piece of code that all participants agree to interact with. I can't even begin to imagine the legal hoops they would have to go through to run a centralized regulated exchange.