Not long I made a topic about bitcoin, how it is not vulnerable like other money, but people just need to know how to perfectly control their bitcoin by practicing self-custody in a way they will control their private keys themselves rather than depending on custodial services as 20kevin20 commented already. And also, someone need to have privacy both offline and especially online, protecting your bitcoin against scammers generally. With these, bitcoin is the perfect version of money.
While you are right and self-custody is the best way to do it, it still does not really come as a solution against what happened with JM Bullion. At least not entirely. Personal information can still be easily stolen - it's just that instead of credit card names, numbers and security codes, they'd get the BTC addresses instead and from there on, it just goes down to a game of blockchain analysis and dust attacks.
The JM Bullion scenario could be repeated onto a lot of websites with BTC. Imagine a malicious script was suddenly placed on paper wallet or seed generating websites. The hackers would just scrap data off whoever uses the website and have full control over their newly-generated keys/seeds.