SECURITY BEST PRACTICE.                        %

ddos protection 80.58%
x-frame-options  65.47%
strikt transport security 39.57%
x-content-type-options 35.25%
x-xss-protection 29.50%
using vulnerable libraries 25.90%
don't expose server information 20.14%
application security protection 15.11%
content-security-policy 2.16%
public-key-pins 0.72%

these were the results of a survey on done on 140 of the top exchanges and the percentage of them that follow the above security protocols. Safe to say its better to take control of your of crypto if you can!