The problem is that centralized  exchanges are vulnerable to hacks and we face the risk that they just steal our coins.

The answer is probably decentralized exchanges which are apparently in the works now. Supposedly with these, the user hold their own private keys.