My post was a reply to the response in the quote above.
I have already pointed out the same context in my reply to the quote i answered (in bold). What i meant is that we can't always just blame users on how they use their devices online or offline because it may be the fault of the manufacturers lunching products that can be vulnerable to malwares. This can be one of the main reasons why users may choose to store their savings in online platforms like exchangers or web-wallets because they can ask for refund if any incident occur to that company.
Excuse me for interrupting this discussion man but this doesn't make sense in any way. Wallet manufacturers are not one and are not two, we have different companies manufacturering hardware wallets and some of them has been in this business for long term, only Ledger has been compromised and that was their email logs and nothing related to any wallet been comprised due to malware. You can't get a malware on hardware wallet because your keys are offline, there is no connection when there is no internet.
Coupable, you need to know that exchanges refund their customer if the fault is not from the customer. If the fault is from the customer, the exchange will not refund the money. Some users mistakes on wallet can happen on exchanges, example is clipboard malware. The exchange will not refund their customer because of clipboard malware. Only when I know exchanges refund their customers is after exchange hack.
See the Coinbase phishing attacks that happened 2 times that Coinbase users lost their money to the phishing attacks, Coinbase did not refund their affected customers.
I tried to explain why the majority of users prefer to use another service to store their funds and to broadcasts daily transactions. Simply because they are not ready to take full responsability of their virtual assets. Even those who know how to store their assets offline and how to take all security measures, they choose what they think it's a trusted reliable service like major exchangers.
Exchangers will not save from device malwares but it can help with additional security layers such as email confirmations for every action and 2FA phone number sms/call. Those features aren't available in non custudial wallet clients and users most of times think that it's a luck of security while in fact it's not.