While it is true that you shouldn't trust exchanges to keep your coins safe, OP's loss is due to a phishing attack. All users having coins on a site (be it exchange, blockchain.info, or casinos) will need to be careful with phishing attack, or will lose your hard-earned bitcoin.