Risk Management.
You've done your due diligence: unique email/pass, 2FA, VPN.
No such thing is "safe".
There are only 2 types of companies: those that have been hacked, and those that will be hacked.
And then there are those which are not worth bothering to hack!

I think Cryptopia might pass from all those 3 types eventually!
I was a locksmith for many years before i got into infosec:
The average thief will spend 5 minutes trying to break into a home. If they fail, they move to the next house.
HOWEVER.
If they want to get in - they are going to get in.
The same holds true with crypto.