KYC/AML for retail platforms in APAC - the moving goalposts?

Been pondering the landscape for retail trading platforms operating across various APAC jurisdictions, especially regarding KYC/AML. It feels like the goalposts are in perpetual motion, doesn't it? What's compliant in say, Singapore, might be a red flag in Hong Kong, and then you have markets like Thailand or Indonesia where local specifics add another layer of 'fun'. We're seeing more push for granular source-of-funds verification even for smaller accounts. How are others finding the balance between robust compliance and not creating so much friction that users just hop to an unregulated offshore outfit? It's a fine line to walk, and getting finer.