I think to enhance security, the exchange must sacrifice customer convenience. Most hacking happens to exchange that implement automated hot wallet withdrawal. Automated withdrawal is a convenience but poses a big risk for hacking because any withdrawal that requested below a certain amount would be done without checking. For best security practice, I think manual, batched withdrawal is the way to go. Take Bitmex for example, they implement a daily, manual withdrawal and I haven't heard them getting hacked.