From the point of view of what's more secure I think exchanges and open web wallets are the same. It's easy to hack both. Desktop wallets are little bit more secure but still not perfect. But where to keep crypto depends on your aims.