Don't use online wallets
So your saying not to use coinbase? What exactly is wrong with using coinbase if you transfer the bitcoin to a cold storage wallet after receiving bitcoin?
I would only put my "expendable" coins there. And always use 2 factor authentication.