It depends on the exchange. Some can provide not just an in-built wallet but a cold storage (for example, CEX, https://cex.io/). That means your coins would be placed offline which prevents money theft. But anyway, hardware wallets are better.