I think they should have insured exchanges, those are at the highest risk.
With about 1/3 of all exchanges suffering hacks before, and customers losing funds, they are in dire need of insurance.