Some people do not just understand that security isn't perfect regardless of exchange. Even if it is non-crypto related, it is worth mentioning that even the most popular sites here in the internet like Twitter just got hacked. Imagine that reputated site to be just hacked at any seconds.
Even the most reputated one could be hacked so why would people can't hold their coins in their own wallets?