They won't tell you where their headquarters are "because Bitcoin doesn't have one":

https://www.coindesk.com/binance-doesnt-have-a-headquarters-...

In fact "Malta ... question mark?" is about as much information as we have.

And the KYC evade is just based on opening more accounts before you reach their threshold. Because rather than operating like a real business, requiring everyone to provide KYC during onboarding, they just look the other way.