I think it all depends on the credit of the trust of the wallet and the exchange. I keep my tokens in the RL wallet - they have a full-fledged ethereum-wallet!