Hmm.. I've been able to zap people np. Only deposited 1000. But that would suck if you have hundreds of k in sats and withdrawing did take more extensive KYC.
Ah ok.. Well I wont keep more than 1000 sats on it anyways but I do see your concern and I think you're in the right for sure. Maybe use Lnaddress.com and legend.lnbits.com ?