This reminds me of when someone tried to hack into my binance account. What you have just said is absolutely facts, leaving coins in exchange sites are a big risk as they could get hacked anytime any day. Storing them on offline wallet like open ledger is the best thing.