seems another bad news on ethereum show up,
and i think the best way to keep your ethereum and ethereum based tokens safe is by using a hardware wallet
Not really. Suppose, you choose weak password for some website and someone guesses your password, does that mean it was fault of website? Mistake was yours that you choose weak password.