In my opinion even the most reputable bitcoin exchanges are suspect. Not because of intention but because of the many ways an exchange is subject to attack. An onsite wallet service is no better. Anything that touches the internet is susceptible to assault.