While it's arguable how will the users get compensated, since in many cases it happens late or in the least favorable currency (I don't know if it's the case at Coinbase), indeed, people see they get compensated, people see that the withdrawal fees are big and then just keep their money there. Sad...
I don't even think that Coinbase has the liability to compensate these users. The company can just argue that the hack resulted because the users relied on weak passwords which were used on multiple websites. And if I am not wrong, this goes against their T&C, which the user needs to agree upon before creating an account with Coinbase. The victims need to prove that there was a lapse from the part of Coinbase and the support didn't responded to the theft on time. Even if the court agree with that, the entire process is going to take some time.