Do you know this for a fact? Do big exchanges really maintain a list of "blacklisted" addresses? Wouldn't they need to constantly be growing that list to include the destinations of any transactions originating from the blacklisted addresses?
They would probably only need to blacklist addresses from major thefts likely to have legal implications. I don't think it's a big task to keep it updated.
The big exchanges are making a lot of money, so it would seem incredibly ill-advised for exchanges not to do this - the risks are simply far too high.
