My exchange in development already have a different wallet for each user.
So you don't plan to do hot/cold wallets? Or you are going to have two wallets for each user?
What I can tell you is that it'll have many security layers.
And the entire project will be open sourced, FOR THE WIN!!