I totally agree that IOTA is a real long-term HODL coin; problem is though how securely we can hodl it

I constantly read about wallet issues; while keeping it on exchanges bitfinex or the few other asian ones that adopted it now, also looks shady.
Any tips?