as long as you do not provide your wallet's private key, I think it is very difficult for hackers to steal your assets, and all this time the loss or theft of assets is due to the negligence of the owner who accessed a fake exchange
but they have other way or technique to attack our wallet.they become smarter after technology developtment support their skills.so no more doubt we have to appreciate their skills.