Just because no one should be using an exchange as a vault, doesn't mean an exchange has the right to steal from its users. You must have very low standards of cryptocurrency exchanges if you think that is okay, that might be acceptable for a shit-tier exchange such as Yobit, but not for legit established businesses. Or it shouldn't be acceptable, perhaps this is what an average user expects