A lot depends not only on the user, but also on the exchange. After all, it must be reliable and protected from hacker attacks. Nevertheless, I try not to keep  coins on the exchange.