I think the safest bet at this time is for everybody to keep their coin on an address that they control.  When Ethereum forked, I was lucky enough to have my coin in an honest online account and they credited my account with the coin in the alternate chain, but there were many who missed out because they didn't control the address which held their coin.  If it's on an exchange, they should make sure they understand the exchange's policy should bitcoin fork.