This is the case for MANY exchanges these days.  The better exchanges you don't really need anything to write them about.   It seems like waiting a week is the norm to start to get too worried.

Maybe exchanges get paranoid and don't like to hire new help because they think it increases risks to get hacked.  But you could monitor them closely so that they know they would get busted if they did, like track their keystrokes and have them sign things limiting their privacy while at work, etc.