Security is always the issue in exchanger. If we store our coin and token in exchanger wallet, better secure our account by using 2FA. Hopely my exchanger not hacked by someone and hopely i dont have experience like that
But what about your private wallets, not exchanges? For example, it's impossible (and pointless actually) to turn on a 2FA on MEW - there's no such an option. Of course, you can buy Ledger to store your ETH more securely, but this is not what every person who just wants to buy some crypto will do.