I prefer idex.

If you are using a hw-wallet you should be fine most of the time on ED anyway, but the weak spot is the website.

The actual smart contracts are great. When their DNS server was hacked you could still withdraw everything safely through the contracts (if you are technically able to, but there's youtube videos for that). If any other exchange was hacked everyone would have been fucked probably.