Due to current realities, when almost all crypto exchanges are centralized, one cannot do without it. The second culprit, of course, is the exchange itself, which allowed itself to be hacked.
The question is of course interesting, I would even say that it is slightly philosophical. But if you look in detail, then the responsibility always lies primarily with the owner of the assets.
Accurate, detailed analysis, the mistake in this case almost belongs to us and we will be responsible for this loss because codes and secret questions, it's always under our control and scope, we even use it every day, if it's leaked, we should be the first one to responsibility. Blaming a system or an exchange is impossible when I believe that they almost always ask us to improve security through multiple layers, and if we did everything but our account was still hacked, the system and the exchange would be responsible for this but this case is very rare and they often compensate for all damages