seems another bad news on ethereum show up,
and i think the best way to keep your ethereum and ethereum based tokens safe is by using a hardware wallet
Not really. Suppose, you choose weak password for some website and someone guesses your password, does that mean it was fault of website? Mistake was yours that you choose weak password.
the problem is when there was a possibility to create a random combination of ethereum privatekey and some times your combination is matched with the real private key and there was a lot of possibilities to open others private key through this process. It just like when you are a wanna opening zip file that you don't know the password.