Children are children and they will always behave as one.
In DEX, we don't create wallet there, we only connect our already created wallet to the DEX exchange. Only CEX allow you to create wallet on there website, all some assets in it before you can trade. Which is far more suicide because this CEX website can go down and never bounce back again.

IMO, I think hardware wallet is the best option here.