Yeah, it does seem unfair. However, it's important to note that you must have these controls, and Binance didn't. The effectiveness of these controls is not the point (sadly).

This is a super, super low bar. One can meet the BSA requirements by sending every transaction to the regulators, but Binance didn't even do that.