Was 2FA enabled? Some people are lazy when it comes to securing their accounts and when funds are stolen, they lay all the blame on exchanges.
You can't blame users for not using 2FA, Poloniex team should have made it mandatory for all users to activate it. This is getting common on most exchanges now that is why you must keep your tokens yourself in your wallet