If these big exchange hire security companies then the decentralization of their tokens will be out. So it is better for the exchanges to solve these problems there own way and debugg those hackers from entering their programs. That way, they can minimize the risk of having hacked by those scambags.