You know BABB has 2FA that you can enable
You are asking or telling your question is not clear. Yes they have option for it to enable 2 FA into dashboard but when we can take withdraw and keep hold under our own wallet than what is need to let them sitting on ICO website.
What will be much safer? Remaining the yokens on babb dashboard? Or just withdrawing it and have your BAX be in you mew, ledger or other wallet? What will be the benefit if it will just be kept on babb account?