What are they doing to get hacked all the time ?
A more useful question to ask would be
What are they doing to NOT get hacked all the time?. Pretending that this can be answered with things like "they're nice about it and they say they know what they're doing but can't tell me what it is because reasons" is how plenty of people are parted from their BTC.