Some exchanges like Binance, Bitfinex and Bittrex are the strongest exchanges currently available. I do not think there will be any problem holding your coins on these exchanges with a api disabled 2FA enabled account.