People should just keep as much on exchange as they feel like it's worth the risk. Exchanges get hacked all the time, it's your choice how much you want to risk.

I think it's like 80-20%, the 80-20 rule is very important. Keep 80% in safe place and 20% in a less safe, risky place.