Yeah, you are right. We shouldn't entrust our hard-earned crypto-assets to any exchange despite good reviews from the community and the sweet promises from its CEO that they'll keep it safe, unless we are going to sell or trade. Asset not kept in our safekeeping is not safe at all. It's really very risky on our part. Afterall, whatever happens to us, it's our sole responsibility; no one's to be blamed since we each have a mind of our own. It's much safer if we'll invest in offline wallets like Ledger, and be responsible not to give your keys to anyone.