The worst thing is that the exchange itself can just freeze your account, take all your assets. Best kept in your personal wallet.
As for your question. Think about it yourself? If, for example, each person had $ 1,000 on the exchange and they were all stolen, how will the exchange recover all the losses?
Even so, there would be a lot of scammers.