All the wallets you mentioned are close source and there is no way to know whether they have access to our keys or not.
Since we don't know how the keys are generated, everything is possible. It's possible that all the keys have been stored on a server and they can be hacked. It's also possible that there's a vulnerably that help the hackers steal users fund.