It was my understanding that both coinbase and xapo had insurance up to a certain amount but I need to recheck.
Xapo insurance covers "employee dishonesty and on-premises theft at Xapo Vault locations". I don't think a remote hack is covered, but they claim it's near impossible (source:
https://support.xapo.com/insurance ). Xapo used to insure their bitcoin at "Xapo Insurance"! Now they claim it's "third party insurance companies with an A.M. Best rating of A or better", whatever that means.
Bottom line is, I will use their wallet to store small amounts, but I trust myself more than any online vault.